Overview

In this video I describe the incident response process.  Companies should have a policy for incidents that should be followed, once one has been identified. The best place to start is the governmental guidelines listed in the publications below.

Videos

• Introduction to Incident Response: An Overview (21 min) 

Readings

• NIST SP 800-61 Rev. 2,  Computer Security Incident Handling Guide
• NIST SP 800-83,  Guide to Malware Incident Prevention and Handling
• NIST SP 800-86,  Guide to Integrating Forensic Techniques into Incident Response
• FCC Incident Response Guide 
• SANS Linux Incident Response Cheat Sheet
• SANS Windows Incident Response Cheat Sheet