Summary
In this chapter, we looked at a couple of practical case studies to demonstrate how Keepnet Incident Responder and IREC can be integrated into your organization's IR plans. We started by considering a real-world spear phishing attack, and how attacks of this type can be easily dealt with by using tools from providers like Keepnet and by training your staff to actively participate in the IR process.
Next, we looked at the practical application of Binalyze's IREC and AIR tools, and then covered how those tools can help us make IR more productive for free (or for a reasonable cost). These tools offer professional digital forensics capabilities that should be taken advantage of.
In the next chapter, we have gathered the opinions of very well-known experts from the cybersecurity field, including recommendations and suggestions about IR and beyond!