You are monitoring your network traffic with the Wireshark utility and noticed that your network is experiencing a large amount of traffic from a…

As a first responder to a suspected DoS incident, the initial reaction should be to make an initial

assessment. This involves quickly evaluating the situation to understand the scope and impact of the

incident. An initial assessment helps in determining whether the unusual traffic is indeed a DoS

attack or a false positive. It also aids in deciding the next steps, such as whether to escalate the

incident, what resources are required, and how to communicate the issue to relevant stakeholders.

Reference: The approach aligns with best practices for incident response, which emphasize the

importance of an initial assessment to understand the nature and extent of a security incident before

proceeding with further actions123.