Introduction to Incident Response and Digital Forensics

This seminar will provide attendees with a general overview of Incident Response and Digital Forensics concepts, which are important when performing the initial response to an actual incident. Topics to be discussed include:

• Recommended User Guidelines
• Strategies to Mitigate Targeted Cyber Intrusions
• Introduction to NIST 800-61
• NIST 800-61 in Depth / Policies and Standard Operating Procedures
• Evidence Preservation Fundamentals
• Hard Drive Imaging / Solid State Drive Imaging / Imaging Other Devices
• Dealing with Mobile Devices (Phones, etc.)
• Volatile and Network-Based Evidence Acquisition
• Forensic Analysis