Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am working on putting together an Incident Response Jump Bag (detailed here).

Any suggestions on what type of container/bag to use for this? It seems like a lot of little items that could be packaged together, and some big items.

I have a messenger bag and backpack, but they don't really seem to cut it.

Anything else that I should take into consideration? (chain of custody issues, etc?)

share|improve this question
This is really borderline security question... – AviD Jan 14 '11 at 0:38
@ AviD, Really? Rory's answer is exactly the kind I was looking for, and I highly doubt SO, SU or SF would have been able to answer it, since it deals with a IR jump bag... – Josh Brower Jan 14 '11 at 0:54
I have to agree with AviD, the fact that the things in the bag are for ITSec purposes is secondary and only slightly relevant to the actual question, which is about packing. Perhaps you could propose Packing.SE on Area51. – Matthew Read Jan 14 '11 at 1:34
I have edited the question to better reflect what I am looking for. – Josh Brower Jan 14 '11 at 4:00
I think this is a borderline question, but I think I'm fairly happy to have it here even if all it does is prompt people to think about things like chain of custody, which they might not otherwise... – Rory Alsop Jan 14 '11 at 9:12
up vote 4 down vote accepted

Depending on the amount of kit you require in your jump bag, you may want a wheeled trolley case or a rucksack, to avoid injury (speaking from experience, I once had to implement a wireless honeypot as part of incident response and the kit included 5 laptops (running simulations, logging etc) and my back ached for weeks)

In any case the only real restriction I would advise is keeping it below airline maximum size and weight considerations - putting forensic kit in hold luggage on the return effectively breaks the chain of custody, and if you do have to fly, leave your screwdrivers/multitool at home in case you aren't allowed to fly with it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.