~/giac-geir · Container DFIR Fundamentals ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Container DFIR Fundamentals
Exam objectives are the official skill domains GIAC Enterprise Incident Response tests. Below are the official GIAC docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
DFIR for Containers Metadata collection and analysis Using snapshots to save containerized files Log analysis for Docker Gather ephemeral data Review image files and history