Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

incident response

0001-01-01

Incident Response is a strategic approach to detecting and managing cyberattacks in a manner that prioritizes minimizing damage, decreases recovery time, and reduces the costs incurred when responding to an incident.


Links to this note

  • GCFA
  • GCFE
  • leveragingldaudittobeatldpreload-ribak2020
  • Main Index
  • gettinganattackeripaddressfromamaliciousatjob-rowland2019
  • incidentresponse-luttgens2014
  • taskverse
  • borges2021
  • disabling bashrc
  • avml
  • CrowdStrike
  • find command
  • incident responder
  • incident response plan
  • Main Index - I
  • SSH_CONNECTION
  • timestamp
  • Volatility

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.