Digital Forensics and Incident Response

Digital Forensics and Incident ResponseDigital Forensics and Incident Response
by:Gerard Johansen
ISBN-10 书号:1787288684
ISBN-13 书号:9781787288683
Release Finelybook 出版日期:2017-07-24
pages 页数:324

Book Description
Key Features
Learn incident response fundamentals and create an effective incident response framework
Master forensics investigation utilizing digital investigative techniques
Contains real-life scenarios that effectively use threat intelligence and modeling techniques


Book Description
Digital Forensics and Incident Response will guide you through the entire spectrum of tasks associated with incident response,starting with preparatory activities associated with creating an incident response plan and creating a digital forensics capability within your own organization. You will then begin a detailed examination of digital forensic techniques including acquiring evidence,examining volatile memory,hard drive assessment,and network-based evidence. You will also explore the role that threat intelligence plays in the incident response process. Finally,a detailed section on preparing reports will help you prepare a written report for use either internally or in a courtroom.
By the end of the book,you will have mastered forensic techniques and incident response and you will have a solid foundation on which to increase your ability to investigate such incidents in your organization.
What you will learn
Create and deploy incident response capabilities within your organization
Build a solid foundation for acquiring and handling suitable evidence for later analysis
Analyze collected evidence and determine the root cause of a security incident
Learn to integrate digital forensic techniques and procedures into the overall incident response process
Integrate threat intelligence in digital evidence analysis
Prepare written documentation for use internally or with external parties such as regulators or law enforcement agencies
About the Author
Gerard Johansen is an information security professional with over a decade of experience in such areas as penetration testing,vulnerability management,threat assessment modeling,and incident response. Beginning his information security career while a cybercrime investigator,Gerard has built on that experience while working as a consultant and security analyst for clients and organizations ranging from healthcare to finance. Gerard is a graduate of Norwich University's Masters of Science in Information Assurance and a Certified Information Systems Security Professional.
Gerard is currently employed as an Enterprise Security Manager with a large retailer with a focus on incident detection,response and threat intelligence integration. He has also contributed to several online publications focused on various aspects of penetration testing.
Contents
Chapter 1. Incident Response
Chapter 2. Forensic Fundamentals
Chapter 3. Network Evidence Collection
Chapter 4. Acquiring Host-Based Evidence
Chapter 5. Understanding Forensic Imaging
Chapter 6. Network Evidence Analysis
Chapter 7. Analyzing System Memory
Chapter 8. Analyzing System Storage
Chapter 9. Forensic Reporting
Chapter 10. Malware Analysis
Chapter 11. Threat Intelligence

下载地址 Download隐藏内容需1积分,VIP免费,请先 !没有帐号? 注 册 一个!
觉得文章有用就打赏一下
未经允许不得转载:finelybook » Digital Forensics and Incident Response

评论 抢沙发

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址

觉得文章有用就打赏一下

非常感谢你的打赏,我们将继续给力更多优质内容,让我们一起创建更加美好的网络世界!

支付宝扫一扫打赏

微信扫一扫打赏