Yesterday we used this image at the eCrime conference and asked “what’s wrong with this picture?”
The ‘official’ answer was “SOC Analysts don’t have time to be in a bar”, as they likely have an alert queue 500 long.
However the audience gave equally funny answers:
- They are smiling
- We can’t get a team who work in the same city/country
- We can’t find 3 good analysts
And who wouldn’t expect a room full of analysts to give an analytical answer
- There’s no barman
Andy