12.07.2013 Views

Anti Incident Response - SANS Computer Forensics

Anti Incident Response - SANS Computer Forensics

Anti Incident Response - SANS Computer Forensics

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

30<br />

<strong>Anti</strong>-<strong>Incident</strong> <strong>Response</strong> Practices<br />

• Chose busy servers as internal hop-points<br />

– Event logs cycle within minutes to hours<br />

– Network activity not out of place<br />

• Chose enormous file servers as a data staging<br />

areas<br />

© 2012 CrowdStrike, Inc. All rights reserved.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!