Explore national-level cyber incident response in this 56-minute Black Hat USA 2013 conference talk. Delve into the complexities of handling large-scale disruptive attacks that could be considered acts of war, moving beyond traditional organizational forensics. Examine the flow of national security incident response in the United States, using a major finance sector attack scenario. Follow the escalation process from individual banks through public-private sector information sharing, Treasury and DHS involvement, to potential military and presidential action. Compare this approach with other countries' processes, analyzing its strengths and weaknesses. Gain insights into cyber conflicts, the role of various national security entities, and the challenges faced at different levels of cyber command.