~/giac-geir · Enterprise Visibility and Incident Scoping ▊
← GIAC Enterprise Incident Response
GIAC · objective · 9% of the exam
Enterprise Visibility and Incident Scoping
Exam objectives are the official skill domains GIAC Enterprise Incident Response tests. Below are the official GIAC docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Sans — FOR608: Enterprise-Class Incident Response & Threat Hunting | SANS Institute
One of many useful features of Velociraptor is its ability to push collected data into Elasticsearch.