---
name: incident-triage
description: Triage a network incident from symptoms to a suspected layer
---

# Incident triage

Work top-down: confirm the blast radius, then bisect by layer
(physical, routing, transport, application). Record every command you
run and its output before changing anything.