Incident Response & Computer Forensics, Third Edition, 3rd Edition

FOREWORD

Incident response has changed significantly over the past decade and since the second edition of this book. Ten years ago incident response was still considered a three to ten host or server problem. It was extraordinary to have several dozen or even several hundred machines in an enterprise compromised. If you set aside the mobile landscape, however, the attack surface (the number of places or applications that are vulnerable) has stayed more or less the same over time. This means either the attackers are compromising more systems or ...