Event Monitoring and Incident Response

Ever wish you could observe, report, and react in a timely manner after an event occurred? Evidence information can disappear after time has passed and attacks can cause further harm if allowed to continue. The speed and manor in which you react can have an affect on the outcome. Using a Host...

By

Ryan Boyle

May 15, 2013

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - HUMINT and its Role within Cybersecurity_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

October 4, 2024

HUMINT and its Role within Cybersecurity

This blog explores HUMINT's role in cybersecurity, detailing its implementation, benefits, and potential risks.

370x370 Jon DiMaggio.png

Digital Forensics, Incident Response & Threat Hunting

January 16, 2024

FOR528: Ransomware & Cyber Extortion Course Updates Implemented – What’s New?

The recent FOR528 course better addresses the differences between ransomware and cyber extortion, and provides new hands-on labs and bonus content.

Blog_teaser_images_(19).png

Digital Forensics, Incident Response & Threat Hunting, Open-Source Intelligence (OSINT)

August 31, 2023

FOR589: Cybercrime Intelligence - NEW SANS DFIR Course coming soon

Learn to traverse the cyber underground, social engineer cybercriminals and investigate illicit cryptocurrency activity.

Sean O'Connor