Intelligence-driven incident response

• Verfasst von: Brown, Rebekah [VerfasserIn]
• Verfasst von: Roberts, Scott J. [VerfasserIn]
• Titel: Intelligence-driven incident response
• Titelzusatz: outwitting the adversary
• Verf.angabe: Rebekah Brown and Scott J. Roberts
• Ausgabe: Second edition
• Verlagsort: Sebastopol, CA
• Verlag: O'Reilly Media, Inc
• Jahr: 2023
• Umfang: xxv, 316 Seiten
• Illustrationen: Illustrationen
• Format: 24 cm
• ISBN: 978-1-0981-2068-9
• ISBN: 1-0981-2068-X
• Schlagwörter: (s)Computerkriminalität / (s)Computersicherheit
• Sprache: eng
• Sach-SW: Computer security
• Sach-SW: Cyber intelligence (Computer security)
• K10plus-PPN: 1861183496

Abstract

Using a well-conceived incident response plan in the aftermath of an online security breach enables your team to identify attackers and learn how they operate. But only when you approach incident response with a cyber threat intelligence mindset will you truly understand the value of that information. In this updated second edition, you'll learn the fundamentals of intelligence analysis as well as the best ways to incorporate these techniques into your incident response process. Each method reinforces the other: threat intelligence supports and augments incident response, while incident response generates useful threat intelligence. This practical guide helps incident managers, malware analysts, reverse engineers, digital forensics specialists, and intelligence analysts understand, implement, and benefit from this relationship