~/giac-geir · Enterprise Incident Response Management ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Enterprise Incident Response Management
Exam objectives are the official skill domains GIAC Enterprise Incident Response tests. Below are the official GIAC docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
The purpose-built Aurora documentation tool is presented as a means for tracking the investigation phases, from initial detection to scoping, containment, indicator development, and remediation.