PP112: When You Look But Don’t Find: The Art of Knowing When to Stop
From Packet Protector by Packet Pushers
June 2, 2026 · 41 min · Episode 112
About this episode
The episode discusses the challenges of knowing when to stop an investigation if no findings are present.
Starting an investigation—be it for troubleshooting, problem diagnosis, threat hunting, incident response, and so on—is fairly straightforward. There’s a question or thesis you’re pursuing, you have logs and data sources to check, and you have tools to deploy. But if you don’t find anything, does that mean there was nothing to find? Are you sure ... Read more »
Topics covered
- investigation
- troubleshooting
- problem diagnosis
- threat hunting
- incident response
Keywords
- investigation
- troubleshooting
- threat hunting
- incident response
- problem diagnosis
More episodes of Packet Protector
- PP113: Patch Gaps, Pretexting, and AI Use for Crimes and Crimefighting: 2026 Verizon DBIR Highlights · June 9, 2026 · 55 min
- PP111: New HPE Mist Features Validate NAC Changes, Enable Inline Microsegmentation (Sponsored) · May 26, 2026 · 48 min
- PP110: News Roundup–Linux Fragged, Edge’s Password Manager Dragged, Android Intrusions Tagged, and More · May 19, 2026 · 58 min
- PP109: ThreatLocker Enforces Zero Trust With Strict Application Control (Sponsored) · May 12, 2026 · 45 min
- PP108: How to Build and Sustain a Successful Zero Trust Project · May 5, 2026 · 51 min
- PP107: Why Now’s the Time to Prepare for a Post-Quantum World (Sponsored) · April 28, 2026 · 51 min
Explore listener stats, chart rankings, contacts and more on the Packet Protector podcast page.