{"id":11916,"date":"2026-11-15T17:30:00","date_gmt":"2026-11-15T17:30:00","guid":{"rendered":"https:\/\/www.cotocus.com\/blog\/?p=11916"},"modified":"2026-11-17T07:30:00","modified_gmt":"2026-11-17T07:30:00","slug":"responseops-beginner-primer-glossary","status":"publish","type":"post","link":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/","title":{"rendered":"ResponseOps for Beginners: A Primer With a Mini-Glossary"},"content":{"rendered":"<p>Newcomers to operations work often hit a wall of vocabulary the first time a security incident is discussed. People say declare, scope, evict, dwell and custody as though they were everyday words. This primer introduces <strong>ResponseOps<\/strong>, the editorial name for handling security incidents as a standing, rehearsed capability, and then explains, one entry at a time, the short list of terms you will keep bumping into. We rely on the Ops Atlas for definitions and stay careful about what it does and does not claim.<\/p>\n<h2>What ResponseOps covers, and what it leaves out<\/h2>\n<p>According to <a href=\"https:\/\/www.xopsschool.com\/responseops\/\">the Atlas entry that defines ResponseOps<\/a>, the scope runs from declaring an incident through containment strategy, evidence handling, basic forensics, eviction, recovery timing, notification clocks, ransomware decisions and exercises. Several neighbours sit outside it: command structure and time-based metrics belong to incident operations, triage of alerts to the security operations centre, detection engineering to its own discipline, threat hunting to another, restores to backup operations, failover to disaster recovery, personal-data breach workflow to privacy operations and legal advice to legal operations.<\/p>\n<p>Knowing the boundary helps a beginner. If a question is about how to write a detection rule, it is a neighbour&#8217;s topic. If it is about what to do in the first hour after something has been found, it is ResponseOps.<\/p>\n<h2>Mini-glossary, part one: the eight practices<\/h2>\n<p>The Atlas arranges the discipline into eight verbs. Think of them as headings on a checklist.<\/p>\n<ul>\n<li><strong>Declare:<\/strong> a deliberate decision that an incident exists, with the time noted and the right people told.<\/li>\n<li><strong>Preserve:<\/strong> collecting evidence before it is lost or altered.<\/li>\n<li><strong>Scope:<\/strong> finding out how far the intruder got.<\/li>\n<li><strong>Contain:<\/strong> limiting further damage without destroying information or alerting the attacker too soon.<\/li>\n<li><strong>Evict:<\/strong> removing the intruder from every place they hold access, ideally in one coordinated move.<\/li>\n<li><strong>Recover:<\/strong> bringing systems back to a trustworthy state.<\/li>\n<li><strong>Notify:<\/strong> informing regulators, customers or partners within the time rules require.<\/li>\n<li><strong>Learn:<\/strong> reviewing and improving afterwards.<\/li>\n<\/ul>\n<h2>Mini-glossary, part two: words that confuse beginners<\/h2>\n<p><strong>Dwell time.<\/strong> The gap between the earliest attacker activity and the moment the team detects it. In the Atlas worked example, activity started at 21:52:40 UTC on one evening and an alert fired at 09:10 UTC the next morning, so the dwell time came to 11 hours, 17 minutes and 20 seconds. The detection side of the clock is not under a response team&#8217;s control, which is why it is tracked separately from the declare and contain intervals.<\/p>\n<p><strong>Time to declare and time to contain.<\/strong> The first is how long the team took to call the incident official after detection; the sample shows 45 minutes. The second is how long until the spread was stopped; the sample shows five hours and 45 minutes.<\/p>\n<p><strong>Scope growth.<\/strong> The ratio of the final number of affected systems to the first estimate. Six systems at the start and fifteen at the end give a factor of 2.5. A big factor is a prompt to widen early investigation next time.<\/p>\n<p><strong>Chain of custody.<\/strong> A written record of who handled each piece of evidence and when, kept in UTC so that entries from different regions line up.<\/p>\n<p><strong>Order of volatility.<\/strong> A rule from an internet guideline that says to gather the most short-lived data first. Memory vanishes on shutdown; disks do not, so capture memory first.<\/p>\n<p><strong>Hash.<\/strong> A short digital fingerprint taken when evidence is collected, so anyone can later check the file has not changed.<\/p>\n<p><strong>Persistent access.<\/strong> Any way an intruder can return: extra accounts, scheduled jobs, stolen keys. US cyber-defence guidance quoted in the Atlas insists on accounting for all of it before eradication begins.<\/p>\n<p><strong>Tabletop.<\/strong> A discussion-based exercise in which participants talk through a scenario without touching real systems.<\/p>\n<p><strong>Re-entry.<\/strong> An intruder coming back after supposed removal. In the Atlas&#8217;s quarterly illustration, one incident out of four had this problem, a re-entry rate of 25 percent.<\/p>\n<h2>Mini-glossary, part three: standards and tools<\/h2>\n<p>You will encounter a few reference documents. The newest US guidance on incident handling, published in April 2025, replaced a 2012 edition and aligns response with the cybersecurity framework&#8217;s functions. An international standard in several parts covers incident management, and a much older internet guideline from 2002 covers evidence collection. A popular six-step model used in training courses is a teaching aid, not a standard.<\/p>\n<p>On the tool side, the Atlas mentions open-source projects such as a case-management platform and an endpoint-forensics collector, along with broad categories of commercial products. As a beginner you need not install any of it. The concepts come first, and tools come later when you know what question you are asking.<\/p>\n<h2>Three beginner mistakes the Atlas warns about<\/h2>\n<p>First, evicting before scoping is complete, which tends to bring the attacker back. Second, restoring machines from backups that were already compromised, which can lead to a second round of damage. Third, conducting response conversations on the same chat or email the intruder might be watching. A fourth, subtler one involves keys: after a certain type of directory compromise, the single master credential needs two resets with a ten-hour gap between them.<\/p>\n<p>These are not exotic. They happen because the pressure of the moment pushes people toward visible action. A written plan removes some of that pressure.<\/p>\n<h2>Why this belongs in a machine learning and platform curriculum<\/h2>\n<p>Learners who come to operations through data and machine learning often assume incident response is somebody else&#8217;s job. In practice, model pipelines hold credentials, data stores and deployment keys that attackers value. Our overview of <a href=\"https:\/\/www.cotocus.com\/blog\/the-essential-role-of-mlops-in-machine-learning-success\/\">why operational discipline matters for machine learning success<\/a> makes the point from the delivery side, and the response side completes it. If you advise teams on this topic, the article on <a href=\"https:\/\/www.cotocus.com\/blog\/complete-guide-to-mlops-consulting-for-machine-learning-teams\/\">what to expect from machine learning consulting engagements<\/a> is worth skimming for prompts you can raise when security enters the conversation.<\/p>\n<h2>Mini-glossary, part four: growth stages<\/h2>\n<p><strong>Maturity ladder.<\/strong> The Atlas proposes five stages that a response capability moves through: ad hoc, defined, practised, measured and adaptive. It stresses that this is its own suggestion rather than an industry standard. Ad hoc means people improvise and hope; defined means a written plan exists; practised means the plan has been rehearsed; measured means a few honest numbers guide improvement; adaptive means lessons feed straight back into the plan.<\/p>\n<p><strong>30\/60\/90 plan.<\/strong> A way to pace the early work. The first thirty days give you an owner, a sponsor, a one-page plan, a separate communication line and sealed emergency accounts. The next thirty add playbooks for ransomware, identity takeover and cloud key compromise, plus an evidence store and a notification map drawn up with counsel. The last thirty bring an executive tabletop, fixes for the biggest gaps, a handoff to the team that runs routine incidents and the first measures.<\/p>\n<p><strong>Break-glass account.<\/strong> An emergency administrator login kept sealed and used only when normal access fails or cannot be trusted.<\/p>\n<h2>Where a beginner should start<\/h2>\n<p>Do three small things. Write the glossary above on one page in your own words. Draw the eight verbs as a line and note, beside each, who would do it on your team. Then read the Atlas entry once, slowly, and highlight only the parts that match your situation. That is enough for week one. The rest, the playbooks, the evidence store, the tabletop and the measures, can follow over a quarter.<\/p>\n<p>One last reminder. The name ResponseOps is not a standard term, and in contracts the plain phrase incident response is safer. Treat the vocabulary here as a learning aid and the standards as the authority. And because notification rules and privilege questions are legal matters, take those to a qualified adviser instead of relying on a primer.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New to incident response vocabulary? This primer defines ResponseOps and the key terms, from dwell time to chain of custody, with figures from the Ops Atlas.<\/p>\n","protected":false},"author":37,"featured_media":11917,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[147],"tags":[],"class_list":["post-11916","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus<\/title>\n<meta name=\"description\" content=\"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus\" \/>\n<meta property=\"og:description\" content=\"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/\" \/>\n<meta property=\"og:site_name\" content=\"Cotocus\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-15T17:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-17T07:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Nikhil Farooqui\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Nikhil Farooqui\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/\"},\"author\":{\"name\":\"Nikhil Farooqui\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/#\\\/schema\\\/person\\\/419007bef27e8d85890550d783b96c50\"},\"headline\":\"ResponseOps for Beginners: A Primer With a Mini-Glossary\",\"datePublished\":\"2026-11-15T17:30:00+00:00\",\"dateModified\":\"2026-11-17T07:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/\"},\"wordCount\":1276,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/b2a-banner-230599-banner.png\",\"articleSection\":[\"DevOps\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/\",\"url\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/\",\"name\":\"ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/b2a-banner-230599-banner.png\",\"datePublished\":\"2026-11-15T17:30:00+00:00\",\"dateModified\":\"2026-11-17T07:30:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/#\\\/schema\\\/person\\\/419007bef27e8d85890550d783b96c50\"},\"description\":\"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/b2a-banner-230599-banner.png\",\"contentUrl\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/b2a-banner-230599-banner.png\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/responseops-beginner-primer-glossary\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ResponseOps for Beginners: A Primer With a Mini-Glossary\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/\",\"name\":\"Cotocus\",\"description\":\"Shaping Tomorrow\u2019s Tech Today\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/#\\\/schema\\\/person\\\/419007bef27e8d85890550d783b96c50\",\"name\":\"Nikhil Farooqui\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g\",\"caption\":\"Nikhil Farooqui\"},\"url\":\"https:\\\/\\\/www.cotocus.com\\\/blog\\\/author\\\/nikhil-farooqui\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus","description":"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/","og_locale":"en_US","og_type":"article","og_title":"ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus","og_description":"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.","og_url":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/","og_site_name":"Cotocus","article_published_time":"2026-11-15T17:30:00+00:00","article_modified_time":"2026-11-17T07:30:00+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png","type":"image\/png"}],"author":"Nikhil Farooqui","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Nikhil Farooqui","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#article","isPartOf":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/"},"author":{"name":"Nikhil Farooqui","@id":"https:\/\/www.cotocus.com\/blog\/#\/schema\/person\/419007bef27e8d85890550d783b96c50"},"headline":"ResponseOps for Beginners: A Primer With a Mini-Glossary","datePublished":"2026-11-15T17:30:00+00:00","dateModified":"2026-11-17T07:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/"},"wordCount":1276,"commentCount":0,"image":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png","articleSection":["DevOps"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/","url":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/","name":"ResponseOps for Beginners: A Primer With a Mini-Glossary - Cotocus","isPartOf":{"@id":"https:\/\/www.cotocus.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#primaryimage"},"image":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png","datePublished":"2026-11-15T17:30:00+00:00","dateModified":"2026-11-17T07:30:00+00:00","author":{"@id":"https:\/\/www.cotocus.com\/blog\/#\/schema\/person\/419007bef27e8d85890550d783b96c50"},"description":"A beginner primer to ResponseOps with a mini-glossary: declare, scope, evict, dwell time, chain of custody, order of volatility and more, explained simply.","breadcrumb":{"@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#primaryimage","url":"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png","contentUrl":"https:\/\/www.cotocus.com\/blog\/wp-content\/uploads\/2026\/11\/b2a-banner-230599-banner.png","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.cotocus.com\/blog\/responseops-beginner-primer-glossary\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cotocus.com\/blog\/"},{"@type":"ListItem","position":2,"name":"ResponseOps for Beginners: A Primer With a Mini-Glossary"}]},{"@type":"WebSite","@id":"https:\/\/www.cotocus.com\/blog\/#website","url":"https:\/\/www.cotocus.com\/blog\/","name":"Cotocus","description":"Shaping Tomorrow\u2019s Tech Today","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cotocus.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.cotocus.com\/blog\/#\/schema\/person\/419007bef27e8d85890550d783b96c50","name":"Nikhil Farooqui","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d855702dac00a5af0405bb329101be495718d611233e52c86fe360c8fca6f6dc?s=96&d=mm&r=g","caption":"Nikhil Farooqui"},"url":"https:\/\/www.cotocus.com\/blog\/author\/nikhil-farooqui\/"}]}},"_links":{"self":[{"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/posts\/11916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/users\/37"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/comments?post=11916"}],"version-history":[{"count":1,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/posts\/11916\/revisions"}],"predecessor-version":[{"id":12026,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/posts\/11916\/revisions\/12026"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/media\/11917"}],"wp:attachment":[{"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/media?parent=11916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/categories?post=11916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cotocus.com\/blog\/wp-json\/wp\/v2\/tags?post=11916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}