Active Security Or: How I learned to stop worrying and use IPS with Incident handling

A highly customized use of Intrusion Prevention Systems (IPS) will benefit organizations throughout the incident handling process. Considerations for incident preparation, identification, containment, eradication, recovery, and lessons learned are provided. This paper focuses on the HP...

By Doug Brown

January 9, 2014

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Digital Forensics and Incident Response

FOR528: Ransomware for Incident Responders - New DFIR Course Q1 2022

Learning to thwart the threat of human-operated ransomware once and for all!

Six_Steps_for_Successful_Mobile_Validation_(7).png

Digital Forensics and Incident Response, Cloud Security

NEW FOR509: Enterprise Cloud Forensics & Incident Response - Debuting October 2021

The new Enterprise Cloud Forensics course brings examiners up to speed with the rapidly changing world of enterprise cloud

Digital Forensics and Incident Response, Cyber Defense Essentials, Industrial Control Systems Security, Purple Team, Blue Team Operations, Penetration Testing and Ethical Hacking, Cloud Security, Security Management, Legal, and Audit

November 30, 2020

Good News: SANS Virtual Summits Will Be FREE for the Community in 2021

They’re virtual. They’re global. They’re free.