Which tool breaks on Fridays?
The tool you bragged about yesterday.
How many meetings can you fit into one morning?
Infinite according to outlook
What is the official fuel of CSOC?
caffeine and sometimes nicotine
What belongs in every outage call?
someone blaming security
What’s the fastest way to end a ticket?
Assign it to the ServiceDesk
There is an outage, who is at fault?
Proxy
You are about to send a funny meme to your coworker, what must you first consider?
A. Am I trying to hard?
B. Will they think it's funny?
C. Is this workplace appropriate?
D. Will they have time to open it?
B. Will they think it's funny?
Why did the EIS engineer bring a ladder to work?
The alerts were through the roof
What is the most cursed button at work?
"Join call"
You discover a potential security breach while on call, What's your next step?
Send a company wide email to see if they all agree?
When a coworker says, "I'm pushing a small change, we tested it", what does it actually mean?
Testing in production
What is the real meaning of, "Let me know if you need anything?"
"Please don't need anything"
What’s the unofficial CSOC rule for unexplained issues?
Layer 8/User Error
What is the best Evidence to Provide during an Audit?
Time and date on task bar
This is the first person people think of when someone says, ‘We should probably ask an adult.’
Who is, Cindy
What is the real meaning of 404?
A. Imperva Error
What's the real meaning of 'on a bridge'?
A polite way of saying, "We're panicking professionally"
New IR manager is Hired, what happens next?
They stay at the bank and retire after 40 years of service and live happily ever after. (within ZTC footprint)
What is the primary reason for Orgs to use SIEM Platforms?
To store all the best shared memes in one convenient location.
It's Friday at 4:30 PM and the risk alert blows up, what happened?
Ben
What is the purpose of training a LLM (AI)?
To summarize ADO tickets.
Your creating a feature and must assign story points, what's the correct value?
404 not found
What is the universal sign that today will be chaotic?
Windows update
What is a valid excuse for not fixing a vulnerability?
I need to take it to CAB
What’s the most dangerous phrase in a work meeting?
Can you send us a dot request?