Digital Forensics and Incident ResponseA practical guide to deploying digital forensic techniques in response to cyber security incidentsAbout This BookLearn incident response fundamentals and create an effective incident response frameworkMaster forensics investigation utilizing digital investigative techniquesContains real-life scenarios that effectively use threat intelligence and modeling techniquesWho This Book Is ForThis book is targeted at Information Security professionals, forensics practitioners, and students with knowledge and experience in the use of software applications and basic command-line experience. It will also help professionals who are new to the incident response/digital forensics role within their organization.What You Will LearnCreate and deploy incident response capabilities within your organizationBuild a solid foundation for acquiring and handling suitable evidence for later analysisAnalyze collected evidence and determine the root cause of a security incidentLearn to integrate digital forensic techniques and procedures into the overall incident response processIntegrate threat intelligence in digital evidence analysisPrepare written documentation for use internally or with external parties such as regulators or law enforcement agenciesIn DetailDigital Forensics and Incident Response will guide you through the entire spectrum of tasks associated with incident response, starting with preparatory activities associated with creating an incident response plan and creating a digital forensics capability within your own organization. You will then begin a detailed examination of digital forensic techniques including acquiring evidence, examining volatile memory, hard drive assessment, and network-based evidence. You will also explore the role that threat intelligence plays in the incident response process. Finally, a detailed section on preparing reports will help you prepare a written report for use either internally or in a courtroom.By the end of the book, you will have mastered forensic techniques and incident response and you will have a solid foundation on which to increase your ability to investigate such incidents in your organization.Style and approachThe book covers practical scenarios and examples in an enterprise setting to give you an understanding of how digital forensics integrates with the overall response to cyber security incidents. You will also learn the proper use of tools and techniques to investigate common cyber security incidents such as malware infestation, memory analysis, disk analysis, and network analysis. ISBN: 9781787288683, 1787288684
