Hands-on Incident Response and Digital Forensics

PREFACE

It is often said there are two types of organisation: those who have experienced an information security incident, and those who don’t know they’ve experienced a security incident. From this, and the constant barrage of information-security-related news stories that fill our timelines, news feeds and television screens, it should be very clear to everyone that we live in a time when the information security incident is extremely relevant. This is not going to change any time soon. Incidents will continue to occur, and organisations will be judged on how they react to a given incident. Throughout this book, we’re going to be deconstructing security incidents – how they’re discovered, what to do and what not to do when they strike and, ...