This week I talk about scoping network connections as part of incident response triage