Digital Forensics and Incident Response: A practical guide to deploying digital forensic techniques in response to cyber security incidents

Gerard Johansen

Jul 2017 · Packt Publishing Ltd

Ebook

324

Pages

Tools

About this ebook

A practical guide to deploying digital forensic techniques in response to cyber security incidentsKey Features

Book DescriptionDigital Forensics and Incident Response will guide you through the entire spectrum of tasks associated with incident response, starting with preparatory activities associated with creating an incident response plan and creating a digital forensics capability within your own organization. You will then begin a detailed examination of digital forensic techniques including acquiring evidence, examining volatile memory, hard drive assessment, and network-based evidence. You will also explore the role that threat intelligence plays in the incident response process. Finally, a detailed section on preparing reports will help you prepare a written report for use either internally or in a courtroom. By the end of the book, you will have mastered forensic techniques and incident response and you will have a solid foundation on which to increase your ability to investigate such incidents in your organization. What you will learn

Create and deploy incident response capabilities within your organization
Build a solid foundation for acquiring and handling suitable evidence for later analysis
Analyze collected evidence and determine the root cause of a security incident
Learn to integrate digital forensic techniques and procedures into the overall incident response process
Integrate threat intelligence in digital evidence analysis
Prepare written documentation for use internally or with external parties such as regulators or law enforcement agencies

Who this book is for

This book is targeted at Information Security professionals, forensics practitioners, and students with knowledge and experience in the use of software applications and basic command-line experience. It will also help professionals who are new to the incident response/digital forensics role within their organization.

A practical guide to deploying digital forensic techniques in response to cyber security incidentsKey Features Book DescriptionDigital Forensics and Incident Response will guide you through the entire spectrum of tasks associated with incident response, starting with preparatory activities associ...

Discover more

About the author

Gerard Johansen is an incident response professional with over 15 years' experience in areas like penetration testing, vulnerability management, threat assessment modeling, and incident response. Beginning his information security career as a cyber crime investigator, he has built on that experience while working as a consultant and security analyst for clients and organizations ranging from healthcare to finance. Gerard is a graduate of Norwich University's Master of Science in Information Assurance program and a certified information systems security professional. He is currently employed as a senior incident response consultant with a large technology company, focusing on incident detection, response, and threat intelligence integration.

Rate this ebook

Tell us what you think.

Reading information

Smartphones and tablets

Install the Google Play Books app for Android and iPad/iPhone. It syncs automatically with your account and allows you to read online or offline wherever you are.

Laptops and computers

You can listen to audiobooks purchased on Google Play using your computer's web browser.

eReaders and other devices

To read on e-ink devices like Kobo eReaders, you'll need to download a file and transfer it to your device. Follow the detailed Help Center instructions to transfer the files to supported eReaders.

Flag as inappropriate