You're reading from Digital Forensics and Incident Response Incident response tools and techniques for effective cyber threat response

Product type Paperback

Published in Dec 2022

Publisher Packt

ISBN-13 9781803238678

Length 532 pages

Edition 3rd Edition

Concepts

Forensics

Author (1):

Gerard Johansen

View More author details

Table of Contents (28) Chapters

Preface

1. Part 1: Foundations of Incident Response and Digital Forensics

2. Chapter 1: Understanding Incident Response FREE CHAPTER

3. Chapter 2: Managing Cyber Incidents

4. Chapter 3: Fundamentals of Digital Forensics

5. Chapter 4: Investigation Methodology

6. Part 2: Evidence Acquisition

7. Chapter 5: Collecting Network Evidence

8. Chapter 6: Acquiring Host-Based Evidence

9. Chapter 7: Remote Evidence Collection

10. Chapter 8: Forensic Imaging

11. Part 3: Evidence Analysis

12. Chapter 9: Analyzing Network Evidence

13. Chapter 10: Analyzing System Memory

14. Chapter 11: Analyzing System Storage

15. Chapter 12: Analyzing Log Files

16. Chapter 13: Writing the Incident Report

17. Part 4: Ransomware Incident Response

18. Chapter 14: Ransomware Preparation and Response

19. Chapter 15: Ransomware Investigations

20. Part 5: Threat Intelligence and Hunting

21. Chapter 16: Malware Analysis for Incident Response

22. Chapter 17: Leveraging Threat Intelligence

23. Chapter 18: Threat Hunting

24. Assessments

25. Index

Why subscribe?

26. Other Books You May Enjoy

Appendix

Index

As this ebook edition doesn't have fixed pagination, the page numbers below are hyperlinked for reference only, based on the printed edition of this book.

AccessData Forensic Toolkit 249

acquisition, host-based evidence

live acquisition 119

local 119

offline acquisition 120

remote 119

Address Resolution Protocol (ARP) 55

AD Forest Recovery

reference link 358

administrative shares, problems

reference link 356

Advanced Forensics File Format (AFF4) 164

Advanced Persistent Threat (APT) 76, 431, 465

characteristics 431, 432

Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) 21, 82, 438

adversaries 195

AFF4 Imager 166

After-Action Review (AAR) 44

AlienVault Open Threat Exchange (OTX) 447

Amazon Web Services (AWS) 88, 141

Anonymous 431

Antimalware Scan Interface (AMSI) 356

antivirus scanning 406

App.any 419

application servers 99

APT28 440-442

Arkime 208, 388...

The rest of the chapter is locked

You're reading from Digital Forensics and Incident Response Incident response tools and techniques for effective cyber threat response

Table of Contents (28) Chapters

Index

Authors (1)

Personalised recommendations for you

You're reading from Digital Forensics and Incident Response Incident response tools and techniques for effective cyber threat response

Table of Contents (28) Chapters Close

Index

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you

Table of Contents (28) Chapters