This appendix contains a collection of the various tools used and referenced in the book (along with their use and URL) and aims to work as a reference resource for the exam, in addition to when you’re responding to live incidents. Use it as a quick way to identify the tool that can perform a specific task or to provide insight when asked about a tool and what task it performs. When responding to incidents, go over the list to identify what tools can help you perform the specific tasks you require.



Get GCIH GIAC Certified Incident Handler All-in-One Exam Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.