Prioritizing Endpoints Helps to Focus Incident Response

Prioritizing Endpoints Helps to Focus Incident Response

As part of a responding flyaway team, it’s probably common for you to arrive at your client’s offices, only to be pointed to a set of boxes to start analyzing. The client may tell you that they did some of their own digging around and identified the computers for you...

Reducing Response Time with Whitelisting

When triaging a host during incident response, it is critical to be able to quickly focus on the suspicious data. Whitelisting gives you the ability to ignore known safe files, for example, so that you can focus on truly suspicious items. However, you can’t know...