Thanks for the notes, Kathy. WP, I read over them and have a question related to the SSR aspects. However, I signed up as a reviewer, so I'm just trying to ask for clarification. In the incident response space, DNS logs are a recommended source of information about an intrusion campaign. Diamond model, etc., talk about infrastructure and victims. Are effects on incident response and network forensics in scope when ICANN talks about security issues? -- best, Jono

From my mobile, please excuse brevity

On Tue, Feb 22, 2022, 20:04 Kathy Schnitt <kathy.schnitt@icann.org> wrote:

Greetings Evo of Reso Work Party,

Attached is the transcription from the SSAC Evolution of the DS Resolution Work Party Meeting on Thursday, 17 February 2022. You can also find this on the wiki at: https://community.icann.org/display/ssac/Thursday+17+February+2022

Best,

Kathy

_______________________________________________ SSAC-Evo-Reso-WP mailing list SSAC-Evo-Reso-WP@icann.org https://mm.icann.org/mailman/listinfo/ssac-evo-reso-wp

_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.