Incident Response (IR) teams are designed to detect, investigate and, when necessary, perform remediation in the event of a critical incident. This whitepaper explores the results of the latest SANS survey, providing a picture of what IR teams are up against today—the types of attacks they see, what defenses they have in place to detect and respond to these threats, and their perceived effectiveness and obstacles to incident handling.