Subscription

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Conferences

Free Learning

You're reading from Digital Forensics and Incident Response Incident response techniques and procedures to respond to modern cyber threats

Product type Paperback

Published in Jan 2020

Publisher

ISBN-13 9781838649005

Length 448 pages

Edition 2nd Edition

Languages

Python

Tools

PowerShell

Concepts

Forensics

Author (1):

Gerard Johansen

View More author details

Table of Contents (22) Chapters

Preface

1. Section 1: Foundations of Incident Response and Digital Forensics

2. Understanding Incident Response FREE CHAPTER

3. Managing Cyber Incidents

4. Fundamentals of Digital Forensics

5. Section 2: Evidence Acquisition

6. Collecting Network Evidence

7. Acquiring Host-Based Evidence

8. Forensic Imaging

9. Section 3: Analyzing Evidence

10. Analyzing Network Evidence

11. Analyzing System Memory

12. Analyzing System Storage

13. Analyzing Log Files

14. Writing the Incident Report

15. Section 4: Specialist Topics

16. Malware Analysis for Incident Response

17. Leveraging Threat Intelligence

18. Hunting for Threats

19. Assessment

20. Other Books You May Enjoy

Leave a review - let other readers know what you think

Appendix

Questions

For effective log management, an organization should establish logging as a normal business practice.

A) True
B) False

Which is not one of the functions of a SIEM?

A) Log retention
B) Automated response
C) Alerting
D) Log aggregation

Which of these is not part of the Elastic Stack?

A) Kibana
B) Elasticsearch
C) Log response
D) Logstash

Locard's exchange principle basically states that when two objects come into contact with each other, they leave traces.

A) True
B) False

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Gerard Johansen

Gerard Johansen is an incident response professional with over 15 years' experience in areas like penetration testing, vulnerability management, threat assessment modeling, and incident response. Beginning his information security career as a cyber crime investigator, he has built on that experience while working as a consultant and security analyst for clients and organizations ranging from healthcare to finance. Gerard is a graduate of Norwich University's Master of Science in Information Assurance program and a certified information systems security professional. He is currently employed as a senior incident response consultant with a large technology company, focusing on incident detection, response, and threat intelligence integration.

See other products by Gerard Johansen