Blog

  • Essentials of Incident Response: 01. Preparation – Process

    This blog series has been updated here. In this series on the Incident Response Process, I’m devoting at least one post to each of the steps in the PICERL (Preparation, Identification, Containment, Eradication, Remediation and Lessons Learned) method. Preparation is key to the others, so…

  • Essentials of Incident Response: 01. Preparation – People

    This blog series has been updated here. In the first post of this series, I gave an overview of the steps associated with the IR process. Starting with this post, I will cover each one in more depth, and identify topics for further development. If…

  • The Essentials of Incident Response

    According to a recent survey of incident responders by the SANS Institute (Torres, 2014), the lack of formal incident response (IR) plans and defined team structures is a primary roadblock to efficient handling of security incidents. In this series, I will discuss the components of…