Section 6

Incident Response Tools

There are many different types of tools required for proper incident response. Incident response team members must be trained and tested in these various types of tools. Specific focus on a specific class of tool, by a specific team member, is acceptable and expected. There are many commercial and open source incident response tools available along with or embedded inside full investigative case management systems. All operating systems currently on the market are included in the scope of these available tools.

Keywords

Live response; case management; log management

There are many different types of tools required for proper incident response. Incident response team members must be trained and tested in these various ...

Get Computer Incident Response and Forensics Team Management now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.