Incident Response: Network Forensics

Preview:

Click to see full reader

Citation preview

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Author:

Bill

Buc

hana

nAuthor:

Bill

Buc

hana

n

Sta

tefu

l fire

wal

lN

etw

ork

Sec

urity

Stateful firewall

PIX

/AS

A C

onfig

Net

wor

k S

ecur

ity

PIX/ ASA

Author: Prof Bill Buchanan

Recommended

SANS 2013 Report: Digital Forensics and Incident Response Survey
Technology
Incident Response & Computer Forensics / Prosise ...media.techtarget.com/.../Downloads/IncidentResponseChapter2.pdf · CHAPTER 2 Introduction to the Incident Response Process 11
Documents
Memory Forensics During Incident Response. Jack Crook Incident Handler Works for GE Founded RaDFIRe Handlerdiaries.com
Documents
ANTI-INCIDENT RESPONSE - Digital Forensics Training · •DoD Computer Forensic Lab, (1998-2002, 2004) •Mandiant (2006-2012) ... Anti-Incident Response Practices •Obscure the
Documents
Trends in Digital Forensics & Incident Response · Several Incident Response or Incident Handling frameworks One popular approach has 6 steps Steps 1 & 2 are Preparation and Identification
Documents
Memory forensics and incident response
Technology
Intro to Incident Response and Forensics
Documents
Memory Forensics for Incident Response
Technology
Incident Response and Digital Forensics – Denver Chapter of ISACA
Documents
Incident response and forensics - Flexential · Incident response and forensics To learn more about Flexential services, contact us at 877.448.9378 or sales@flexential.com • 24/7
Documents
Chapter 1 Computer Forensics and Incident Response Essentials · PDF fileChapter 1 Computer Forensics and Incident Response Essentials In This Chapter Catching the criminal: the basics
Documents
Cyber Incident Response & Digital Forensics Lecture
Technology
Incident Response Preparedness: Best Practices - lba.org Crocker - Incident Response - Are... · Sr. Incident Response Consultant, Incident Response & Digital Forensics . SecureWorks
Documents
Windows Forensics - Exercises - JKU · Michael Sonntag, Christian Praher Windows Forensics 3 Environment More incident response than forensics No clear separation between …
Documents
Incident Response: Live Forensics and Investigationsscitechconnect.elsevier.com/wp-content/uploads/2013/09/Incident... · Incident Response: Live Forensics and Investigations Solutions
Documents
IBM QRadar Incident Forensics: QRadar Incident Forensics ...€¦ · Scheduling actions for QRadar Incident Forensics hosts ... Assistance 101 ( ... systems and information through
Documents
Memory Forensics During Incident Response
Documents
Fusing digital forensics, electronic discovery and incident response
Technology
Adapting Incident Response to Meet the Threat Jeff Schilling Director, Global Incident Response and Digital Forensics SecureWorks
Documents
Incident Response and Forensics
Documents