~/giac-geir · Enterprise Visibility and Incident Scoping ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Enterprise Visibility and Incident Scoping — GIAC Enterprise Incident Response
The official GIAC documentation our Enterprise Visibility and Incident Scoping practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
One of many useful features of Velociraptor is its ability to push collected data into Elasticsearch.