Incident Management 101 Preparation and Initial Response (aka Identification)

According to SANS, there are six steps involved in properly handling a computer incident: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. Incident Management 101 provides guidelines, procedures, and tools designed to assist security specialists with the first...

By

Robin Dickerson

January 17, 2005

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 18, 2024

A Prescription for Windows Prefetch Analysis

The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.

Coolest Careers Poster

Digital Forensics, Incident Response & Threat Hunting

SANSがおすすめするサイバーセキュリティの仕事20選: サイバーセキュリティアナリスト/エンジニア

サイバーセキュリティアナリスト/エンジニアの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Blog_teaser_images_(5).png

Digital Forensics, Incident Response & Threat Hunting

February 7, 2022

SANS DFIR Course Roadmap and Job Role Matrix

Here is our suggested Course Roadmap to guide you in your search for training. Use the Job Role Matrix to match a course with common job roles in DFIR