Tagged Questions
0
votes
1answer
170 views
System image that does not allow for recovery of deleted files?
We are working with an contractor regarding a compromised computer. The contractor has asked for a dd dump of the drive. However, my understanding is that dd would allow the contractor to recover ...
6
votes
1answer
2k views
High concentration of UDP traffic, good or bad?
Should a network have a high concentration of UDP traffic compared to TCP traffic bad for a network especially in the context of network security?
I'm looking at my organization's network protocol ...
0
votes
1answer
257 views
IR Jump Bag - What kind of bag/container to use?
I am working on putting together an Incident Response Jump Bag (detailed here).
Any suggestions on what type of container/bag to use for this? It seems like a lot of little items that could be ...
11
votes
2answers
781 views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?