Incident Response

Turning away from law enforcement, computer forensics is a common part of modern-day incident responseIncident response. Incident responseIncident response is essentially the practice of handling computer-related incidentsIncident such as intrusions, denial of service attacks, or malwareMalware. Since most modern organizations rely on information technology for daily work routines, having the ability to swiftly identify and mitigate attacks is vital in order to maintain normal operations. This chapter introduces the reader to the topic of incident responseIncident response and presents the major processes involved in establishing incident responseIncident response capabilities and handling incidentsIncident when they happen.