March 2024
Beginner to intermediate
400 pages
11h 43m
English
This chapter covers the following topics:
Events and Incidents: This section discusses benign and malicious observables.
Incident Response: This section discusses the four phases of incident response, as defined in NIST SP 800-61.
Attack Frameworks and Concepts: This section covers conceptual tools that help in analyzing attacks and attackers.
Evidence and Artifacts: This section discusses how to understand and protect forensic information.
Compliance Frameworks: This section discusses common regulations, their purposes, and notification requirements.
Computer security incidents range from being relatively minor, such as policy noncompliance, to catastrophic cyberattacks. As much as we strive to prevent incidents, ...
Read now
Unlock full access