Incident Response

Windows

Linux

RE&CT Framework

Reference

• NIST SP-800-61: Computer Security Incident Handling Guide
• NIST SP-800-86: Guide to Integrating Forensic Techniques into Incident Response
• SANS Sample Incident Handling Forms
• SANS SCORE Intrusion Discovery
• RE&CT Framework