Active Security Or: How I learned to stop worrying and use IPS with Incident handling

A highly customized use of Intrusion Prevention Systems (IPS) will benefit organizations throughout the incident handling process. Considerations for incident preparation, identification, containment, eradication, recovery, and lessons learned are provided. This paper focuses on the HP...

By

Doug Brown

January 9, 2014

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Incident Response & Threat Hunting, Digital Forensics and Incident Response

January 23, 2023

A Visual Summary of SANS CTI Summit 2023

Check out these graphic recordings created in real-time throughout the event for SANS Cyber Threat Intelligence Summit 2023

Digital Forensics and Incident Response

September 22, 2022

NEW SANS DFIR COURSE IN DEVELOPMENT | FOR577: LINUX Incident Response & Analysis

FOR577: Linux Incident Response & Analysis course teaches how Linux systems work and how to respond and investigate attacks effectively.

Digital Forensics and Incident Response, Cybersecurity and IT Essentials, Industrial Control Systems Security, Purple Team, Open-Source Intelligence (OSINT), Penetration Testing and Red Teaming, Cyber Defense, Cloud Security, Security Management, Legal, and Audit

December 8, 2021

Good News: SANS Virtual Summits Will Remain FREE for the Community in 2022

They’re virtual. They’re global. They’re free.