Anti Incident Response - SANS Computer Forensics
Anti Incident Response - SANS Computer Forensics
Anti Incident Response - SANS Computer Forensics
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
30<br />
<strong>Anti</strong>-<strong>Incident</strong> <strong>Response</strong> Practices<br />
• Chose busy servers as internal hop-points<br />
– Event logs cycle within minutes to hours<br />
– Network activity not out of place<br />
• Chose enormous file servers as a data staging<br />
areas<br />
© 2012 CrowdStrike, Inc. All rights reserved.