Incident response & computer forensics / Jason T. Luttgens, Matthew Pepe and Kevin Mandia.

Material de apoyo de Seguridad Cibernética de la Información.

Foreword, xv -- Acknowledgments, xvii -- Introduction, xix -- Part 1. Preparing for the inevitable incident -- 1. Real world incidents, 3 -- 2. IR Management handbook, 23 -- 3. Pre-incident preparation, 45 -- Part II. Incident detection and characterization -- 4. Getting the investigation started on the right foot, 81 -- 5. Initial development of leads, 95 -- 6. Discovering the scope of the incident, 117 -- Part III. Data collection -- 7. Live data colleccion, 135 -- 8. Forensic duplication, 165 -- 9. Network evidence, 183 -- 10. Enterprise services, 215 -- Part IV. Data analysis -- 11. Analysis methodology, 253 -- 12. Investigating windows systems, 271 -- 13. Investigating Mac OS X Systems, 381 -- 14. Investigating applications, 421 -- 15. Malware triage, 465 -- 16. Report writing, 499 -- Part V. Remediation -- 17. Remediation introduction, 513 -- Remediation case study, 553 -- Index, 573.