~/giac-geir · Container DFIR Fundamentals ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Container DFIR Fundamentals — GIAC Enterprise Incident Response
The official GIAC documentation our Container DFIR Fundamentals practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
DFIR for Containers Metadata collection and analysis Using snapshots to save containerized files Log analysis for Docker Gather ephemeral data Review image files and history