Active Security Or: How I learned to stop worrying and use IPS with Incident handling

A highly customized use of Intrusion Prevention Systems (IPS) will benefit organizations throughout the incident handling process. Considerations for incident preparation, identification, containment, eradication, recovery, and lessons learned are provided. This paper focuses on the HP...

By Doug Brown

January 9, 2014

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Digital Forensics and Incident Response

January 20, 2022

SANS DFIR courses - Justify your training

Use these justification letter templates to share the key details of this training and certification opportunities with your boss.

Digital Forensics and Incident Response, Cybersecurity and IT Essentials, Industrial Control Systems Security, Purple Team, Open-Source Intelligence (OSINT), Penetration Testing and Ethical Hacking, Cyber Defense, Cloud Security, Security Management, Legal, and Audit

December 8, 2021

Good News: SANS Virtual Summits Will Remain FREE for the Community in 2022

They’re virtual. They’re global. They’re free.

Digital Forensics and Incident Response

WMIC for incident response

Earlier this week, I posted about using psexec during incident response. I mentioned at the end of that post that I've been using WMIC in place of psexec and that I'd have more on that later. This post, is a follow up to the psexec post. WMIC Prompted by the excellent work of Ed Skoudis and his...

Mike Pilkington