Incident Case Studies
Throughout this book, we've introduced the fundamentals and current challenges of Incident Response (IR), advised on the composition of your team, and looked at some core methods and tools. We took this foundation forward into the second part of this book, where we considered key stages of the IR lifecycle and how these should be conducted. We continued by considering IR on various different platforms, cyber intelligence sharing, IR in the cloud, and some best practices to take forward into your own IR plans.
In this chapter, we will consider a couple of practical hands-on case studies. These will demonstrate how to use tools from Keepnet Labs and Binalyze to deal with attacks that could have a devastating effect on your organization. We will consider two case studies:
- Dealing with a spear phishing attack with Keepnet Incident Responder
- Performing digital forensics with Binalyze's IREC
