An Incident Handling Process for Small and Medium Businesses

This paper's intention is to assist you in getting an incident response capability off the ground in a SMB environment by analyzing some of the constraints of a smaller corporate environment. It will specifically recommend that at the beginning you avoid certain things such as forensics at first in...

By

Mason Pokladnik

June 18, 2007

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Running EZ Tools Natively on Linux_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Running EZ Tools Natively on Linux: A Step-by-Step Guide

Developed by Eric Zimmerman, the EZ Tools suite is a collection of utilities written to assist with multiple aspects of forensic analysis.

DFIR - Blog - Are Ransomware Victims Paying Less_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Are Ransomware Victims Paying Less? Insights from the Latest Stay Ahead of Ransomware Live Stream

In this month's reboot of the SANS Stay Ahead of Ransomware live stream, we dove into one of the most pressing questions in cyber extortion today.

Mari DeGrazia

Cyber Defense, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Offensive Operations, Pen Testing, and Red Teaming

Month of PowerShell - Windows File Server Enumeration

In this Month of PowerShell article we look at several commands to interrogate Windows SMB servers as part of our incident response toolkit.