How to Investigate Like a Rockstar: Live a real crisis to master the secrets of forensic analysis (Hacking the Planet)

There are two kinds of companies: those that have been breached and those that do not know it yet. And when they finally find out if they are that lucky a violent panic sets in that quickly escalates to the executive level. This book describes in detail such an incident inspired by real life events, from the first doubtful call made by a bank to the height of tension caused by preliminary forensic analysis. We will go as deep as memory analysis, perfect disk copy, threat hunting and data carving while sharing insights into real crisis management: how to steer people in the right direction, what are the crucial reflexes of a first responder, what to say and do in the first minutes of a security incident, and how to address the inevitable challenge of security versus business continuity. Finally, we will tackle the most important issue of all: how to rebuild a trusted and secure information system. We will find out how we can regain trust in machines that have been breached, and how we can make sure attackers will not come back to exact a bitter revenge. Note: Custom scripts and special commands documented in this book are publicly available at www.hacklikeapornstar.com. Tags: incident response, crisis management, forensic analysis, memory analysis, disk analysis, post-mortem analysis