Products and Tools

The type of tools needed by an incident response team will depend on the number and types of services that the team will provide. Many tools are now available, including both free and commercial off-the-shelf products, which can be very useful to a team. As a precursor to the identification and functional descriptions of these tools, this section will describe the categories of tools that may be used to perform various tasks. These categories are not fully inclusive of all tools that may be used to facilitate incident response, but they do provide a good foundation for considering the tools needed by a team. The tools described in this section overlap in some cases with a well-managed security operation, and they do not apply ...

Get Effective Incident Response Team, The now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.