Computer Incident Response and Forensics Team Management. Conducting a Successful Incident Response

✍ Scribed by Leighton Johnson (Auth.)

• Publisher: Syngress
• Year: 2013
• Tongue: English
• Leaves: 323
• Edition: 1
• Category: Library

✦ Synopsis

Computer Incident Response and Forensics Team Management provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members.

Leighton R. Johnson III describes the processes within an incident response event and shows the crucial importance of skillful forensics team management, including when and where the transition to forensics investigation should occur during an incident response event. The book also provides discussions of key incident response components.

• Provides readers with a complete handbook on computer incident response from the perspective of forensics team management
• Identify the key steps to completing a successful computer incident response investigation
• Defines the qualities necessary to become a successful forensics investigation team member, as well as the interpersonal relationship skills necessary for successful incident response and forensics investigation teams

✦ Table of Contents

Content:
Front-matter, Pages i,iii
Copyright, Page iv
Dedication, Page v
About the Author, Page xiii
Section 1 - Introduction, Pages 1-5
Section 2 - Definitions, Pages 7-15
Part 1. Incident Response Team, Pages 17-19
Section 3 - The Stages of Incident Response, Pages 21-35
Section 4 - The Security Incident Response Team Members, Pages 37-46
Section 5 - Incident Evidence, Pages 47-53
Section 6 - Incident Response Tools, Pages 55-62
Section 7 - Incident Response Policies and Procedures, Pages 63-72
Section 8 - Legal Requirements and Considerations, Pages 73-79
Section 9 - Governmental Laws, Policies, and Procedures, Pages 81-91
Part 2. Forensics Team, Pages 93-95
Section 10 - Forensics Process, Pages 97-106
Section 11 - Forensics Team Requirements Members, Pages 107-119
Section 12 - Forensics Team Policies and Procedures, Pages 121-129
Section 13 - Management of Forensics Evidence Handling, Pages 131-144
Section 14 - Forensics Tools, Pages 145-165
Section 15 - Legalities of Forensics, Pages 167-178
Section 16 - Forensics Team Oversight, Pages 179-184
Part 3. General Management and Team, Pages 185-188
Section 17 - General Team Management, Pages 189-193
Section 18 - Corporate IT-Related Security Relationship with SIR&FT, Pages 195-205
Section 19 - Relationship Management, Pages 207-216
Section 20 - Conclusion, Pages 217-220
Appendix A - References, Pages 221-225
Appendix B - Relevant Incident Response and Forensics Publications from Governmental Agencies and Organizations, Pages 227-243
Appendix C - Forensics Team Templates, Pages 245-327
Index, Pages 329-334