This appendix contains a collection of the various tools used and referenced in the book (along with their use and URL) and aims to work as a reference resource for the exam, in addition to when you’re responding to live incidents. Use it as a quick way to identify the tool that can perform a specific task or to provide insight when asked about a tool and what task it performs. When responding to incidents, go over the list to identify what tools can help you perform the specific tasks you require.



Get GCIH GIAC Certified Incident Handler All-in-One Exam Guide now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.