Building a Home Network Configured to Collect Artifacts for Supporting Network Forensic Incident Response

A commonly accepted Incident Response process includes six phases: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. Preparation is key. It sets the foundation for a successful incident response. The incident responder does not want to be trying to figure out...

By

Gordon Fraser

September 21, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - HUMINT and its Role within Cybersecurity_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

October 4, 2024

HUMINT and its Role within Cybersecurity

This blog explores HUMINT's role in cybersecurity, detailing its implementation, benefits, and potential risks.

370x370 Jon DiMaggio.png

Digital Forensics, Incident Response & Threat Hunting

January 16, 2024

FOR528: Ransomware & Cyber Extortion Course Updates Implemented – What’s New?

The recent FOR528 course better addresses the differences between ransomware and cyber extortion, and provides new hands-on labs and bonus content.

Blog_teaser_images_(19).png

Digital Forensics, Incident Response & Threat Hunting, Open-Source Intelligence (OSINT)

August 31, 2023

FOR589: Cybercrime Intelligence - NEW SANS DFIR Course coming soon

Learn to traverse the cyber underground, social engineer cybercriminals and investigate illicit cryptocurrency activity.

Sean O'Connor