Incident Response Case Management
- Steve Armstrong
- Tuesday, May 13th, 5:30pm - 6:00pm
Steve Armstrong (currently teaching the FOR572 course), will talk about IR case management covering some of the tools available today.¬†¬†He will talk about some of the issues facing teams when trying to move security data around the network.¬†¬†With hackers increasingly monitoring their victims, he will discuss the challenge of having secure communications to all IR staff.
Finally, he will also demonstrate the some of the features of the CyberCPR.¬†¬†A bespoke IR tool written by Responders for Responders, that addresses many of these issues.¬†¬†
CyberCPR is a FREE tool that will be released in BETA in June.
The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:
- SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
Tuesday, May 13
|Incident Response Case Management||Steve Armstrong||Tuesday, May 13th, 5:30pm - 6:00pm||SANS@Night|