Incident Response Case Management
- Steve Armstrong
- Tuesday, June 17th, 5:30pm - 6:30pm
Steve Armstrong will talk about IR case management covering some of the tools available today.¬†¬†He will talk about some of the issues facing teams when trying to move security data around the network.¬†¬†With hackers increasingly monitoring their victims, he will discuss the challenge of having secure communications to all IR staff.
Finally, he will also demonstrate the some of the features of the CyberCPR.¬†¬†A bespoke IR tool written by Responders for Responders, that addresses many of these issues.¬†¬†
CyberCPR is a FREE tool that will be released in BETA in June.
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
Tuesday, June 17
|Incident Response Case Management||Steve Armstrong||Tuesday, June 17th, 5:30pm - 6:30pm||SANS@Night|
Thursday, June 19
|From Mimikatz to DPAPI||Francesco Picasso||Thursday, June 19th, 5:30pm - 6:30pm||SANS@Night|