“I am a new IR analyst, where do I start”
Every step opens something already published on this site. Skip what you already know; the order matters more than the completeness.
Ten minutes of orientation. What IR actually is, and what it is not, before the acronyms start.
The incident handling guide nearly every IR programme is built on. Read it once now, properly; you will return to it for years.
Two short pieces that map the org charts you are about to work inside. Knowing who does what saves months of confusion.
The Runbook for the job most new analysts get first. Verdicts, time boxes, and when a report becomes an incident.
Follow the seven NIST phases end to end on the two most common incident types. This is the shape of every response you will ever run.
Keep it beside you. The step by step from the document library, plus the classic Incident Handling Step by Step in the same section.
The big one. Read it before you are in one, so day one is recall rather than research.
Twenty minutes on how the money side of security thinks. Useful preparation for every budget conversation you will overhear.
The fastest way through the first two years is a peer group and a senior voice. Both live here.