~/giac-geir · Enterprise Incident Response Management ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Enterprise Incident Response Management — GIAC Enterprise Incident Response
The official GIAC documentation our Enterprise Incident Response Management practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
The purpose-built Aurora documentation tool is presented as a means for tracking the investigation phases, from initial detection to scoping, containment, indicator development, and remediation.