Forensics in the CISA Incident Response Playbook

The Cybersecurity and Infrastructure Incident Response and Vulnerability playbook released by the Cybersecurity and Infrastructure Security Agency (CISA) in November 2021 lays out a detailed plan for how agencies should implement communication, technology, and policy for Incident response. Forensic collection, preservation, analysis, and reporting are important parts of this playbook.

This presentation will discuss the Incident Response playbook and detail how you can apply your forensic solutions to the playbook.

Key Takeaways:

• Understand the basics of the Incident Response Playbook
• Understand the importance of Forensic investigation within the playbook
• Address mobile device analysis as it relates to incident response and forensics
• Discuss key collection technologies and methods for effective incident response and forensics