Incident Response: Investigating Computer Crime

by Chris Prosise, Kevin Mandia

This is one of the first books available that explains what to do after you've been hacked. Written by FBI insiders, this book reveals the computer forensics process and offers authoritative solutions designed to counteract and conquer hacker attacks.

Genres: Technical

512 pages, Paperback

First published May 1, 2001

Reviews

[Dan Mann]

Eminently readable, Incident Response: Investigating Computer Crime, prepares the cyber security professional for exactly what to do when a cyber security incident occurs. One of my biggest takeaways is to not panic and that evidence must be maintained for traffic analysis to be effective. This edition may be less relevant with ransomware’s growth and cloud services, but fundamentals of investigation don’t change and are still useful. Specific tools maybe not so much.