Best Teacher is Last Mistake: Improving and Applying Incident Response Plan
summary
Covers why rapid incident response is critical given attackers can escalate privileges and encrypt environments within 24 hours, and lays out how to design, implement and execute an effective Incident Response (IR) plan. Discusses real-world attack timelines and practical IR planning and execution practices aimed at detecting and handling threats immediately after discovery.
AI-written summary · about
chapters (13)
- 0:00Start
- 3:30Impactful Hacking Stats for 2021
- 5:41Phish Biting
- 6:16Uneducated Employees
- 11:45What is an Incident?
- 15:12Why is it important?
- 18:03Incidents
- 18:59Incident handling
- 31:14Initiating an Investigation (1/2)
- 32:41Incident Response (1/2)
- 33:55Handling Information (1/2)
- 41:06Incident Preparation Components
- 41:36Summary
related talks
49mTraining for Incident Response: The Red, the Blue, and the Ugly
40mIncident Response – How to Give the Advantage to the Hackers!
49mIR: Optimizing Communications and Action Between Legal and Tech Leaders
41mHow to Keep Your Cool and Write Powerful Incident Response Reports
18mSurviving the Attack: Planning and Practicing IoT Security Response
51mReal World Stories of Incident Response and Threat Intelligence
23mBuilding and Sustaining an Effective Incident Response Center
44mPanel: Peak Performance Under Pressure: Building Cross-Functional Resilience in Incident Response