alt text:
We were going to try swordfighting, but all my compiling is on hold.
explanation: https://explainxkcd.com/wiki/index.php/2961:_CrowdStrike
alt text:
We were going to try swordfighting, but all my compiling is on hold.
explanation: https://explainxkcd.com/wiki/index.php/2961:_CrowdStrike
Me, the only sysadmin with access to the data center and AD: “I’m drowning!”
ISR team that selected Crowdstrike: " were going to the coffee shop, let us know when it’s back up"
Today has been a nightmare of stupid problems
I hope you guys run a lessons learned after it all. Go ahead and roll your eyes, but reflecting on prior performance can have a huge impact for the future. It shouldn’t all come down to you in the end, and that’s okay.
Every org worth their weight will be doing a root cause analysis after this. So many lessons learned. We were impacted very minimally and only through external vendors.
Consider yourself lucky!