DFIR 26 May 2026
The CERT-In six-hour window: what your DFIR runbook needs to say
CERT-In Direction 70B (April 2022) requires reporting of certain cyber incidents within six hours of detection. A practical breakdown of what the clock actually measures, what your runbook needs to include, and where most organisations get the timeline wrong.
By Cyberange DFIR Consulting