Computer Incident Response and Forensics Team Management : Conducting a Successful Incident Response

Johnson, Leighton

Syngress Media,U.S.（2013/12発売）

• 製本 Paperback:紙装版/ペーパーバック版／ページ数 352 p.
• 言語 ENG
• 商品コード 9781597499965
• DDC分類 005.8

Full Description

Computer Incident Response and Forensics Team Management provides security professionals with a complete handbook of computer incident response from the perspective of forensics team management. This unique approach teaches readers the concepts and principles they need to conduct a successful incident response investigation, ensuring that proven policies and procedures are established and followed by all team members. Leighton R. Johnson III describes the processes within an incident response event and shows the crucial importance of skillful forensics team management, including when and where the transition to forensics investigation should occur during an incident response event. The book also provides discussions of key incident response components.

Contents

Introduction and definitions

The Stages of Incident Response

Security Incident Response Team Members

Incident Evidence

Incident Response Tools

Incident Response Policy and Procedures

Legal Requirements and Considerations

Government Policy and Procedures

Forensics Process

Forensics Team Requirements

Forensics Team Policy and Procedures

Management of Forensics Evidence Handling

Forensics Tools

Legalities of Forensics

Forensics Team Oversight

Corporate Management

Relationship Management

Conclusion