Incident Response & Computer Forensics

by Chris Prosise, Kevin Mandia, Matt Pepe

Written by FBI insiders, this updated best-seller offers a look at the legal, procedural, and technical steps of incident response and computer forensics. Including new chapters on forensic analysis and remediation, and real-world case studies, this revealing book shows how to counteract and conquer today’s hack attacks.

Genres: Business, Computer Science, Reference, Technical, Computers

507 pages, Paperback

First published July 17, 2003

Reviews

[Tresuiri · Rating 3 out of 5]

This book is a little dated (2003), but it is an excellent professional resource. I particularly liked the first and last chapters, being the most practical to me at this time. In fact, I think these chapters are better than the SANS material presented in their GCIH course (#504). The SANS course is obviously weighted towards understanding the attacker more than cleaning up the mess afterwards. Therefore I think this book is well written in the focus of incident response, a compliment to the course if you will. If the reader is looking for a comprehensive forensics resource, I advise looking elsewhere. Again, the design of this book is in the context of incident handling – the authors put in good information to be had in that context, but this book is not a comprehensive forensics book. Overall, I liked it. It was relatively easy to read, but I think they could have put in more examples to illustrate their points.

[Kevin · Rating 3 out of 5]

Overall not a bad text on Computer Forensics. Some of the material I felt was a little outdated. I guess there was a new version that came out this Spring so I imagine that should be more up-to-date.

[Jim · Rating 1 out of 5]

Text book from the Graduate program with Maryland College