Incident Management 101 Preparation and Initial Response (aka Identification)

According to SANS, there are six steps involved in properly handling a computer incident: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. Incident Management 101 provides guidelines, procedures, and tools designed to assist security specialists with the first...

By

Robin Dickerson

January 17, 2005

All papers are copyrighted. No re-posting of papers is permitted

Related Content

ransomware 25 340x340.png

Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming

Visual Summary of SANS Ransomware Summit 2025

Check out these graphic recordings created in real-time throughout the event for SANS Ransomware Summit 2025

Blog Teaser: Shoplifting2.0 340x340.jpg

Digital Forensics, Incident Response & Threat Hunting

Shoplifting 2.0: When it’s Data the Thieves Steal

Identify steps organisations can implement to protect against Scattered Spider and DragonForce

Adam Harrison

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2025

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.