Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What items should be included in a jump bag? How often do you review your jump bag?

share|improve this question
    
Oh man I wish there was some good answers to this question :) –  Chris Andrè Dale Dec 6 '10 at 11:15
    
I really wish there had been some more answers. I almost started a bounty. –  sdanelson Dec 7 '10 at 1:01
    
Useful related links to similar questions on Security Stack Exchange as these should be considered together - Network Forensics tools - Computer Forensics tools –  Rory Alsop Dec 14 '10 at 22:42
add comment

2 Answers

up vote 5 down vote accepted

This article can be a good start.

share|improve this answer
    
Thanks for the link. –  sdanelson Dec 6 '10 at 2:17
1  
Good link with alot of very usefull papers and cheatsheets. Ive printed them out and added to my own jump bag. However I wish there was a more detailed answer in this question. –  Chris Andrè Dale Dec 6 '10 at 11:16
3  
Interesting link, but a link alone does not an answer make. –  Iszi Jan 12 '11 at 3:17
add comment

Often we use field visits for information gathering and/or equipment seizing. So a lot of the papers and cheatsheats will be left back in the lab. We also have an old laptop set up that is kept on the shelf, but used entirely for field work. It is, however, not normally kept in the jump bag.

My bag specifically contains:

  • Several Network Cables (straight through, loopback)
  • Serial cable with serial->USB adapter
  • Juniper and Cisco serial adapters
  • Hard drives (various sizes)
  • Flash drive
  • Backtrack LiveDVD
  • Logicube-MD5 (portable drive duplicator with write-blocker)
  • Various drive interface adapters
  • Handheld label printer
  • 4 port hub
  • Digital camera
  • Cable ties
  • Cable snips
  • Assorted screw and hex drivers
  • Notebooks and pens
  • Chain of Custody forms
  • Incident Handling Procedure
  • Business cards for all members of the team

We will also grab any other oddities as necessary for specific cases not covered above.

A review of the bag contents doesn't happen often enough. There is typically a spot check at each use, though this is largely to determine if there are any unusual items needed for this specific event. In practice, the contents get reviewed along with the rest of the lab at year end when we do equipment refresh.

share|improve this answer
    
Do you review it on a scheduled basis? If yes, how often? –  sdanelson Dec 10 '10 at 14:34
    
Edited the answer to add that as well. –  Scott Pack Dec 10 '10 at 14:48
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.