The Ethical Hacker Network - What are your recommendations for Incident Response books?

EH-Net > Ethical Hacking Discussions and Related Certifications > Incident Response (Moderator: don) > What are your recommendations for Incident Response books?

Pages: [1] Go Down

« previous next »

	Author	Topic: What are your recommendations for Incident Response books? (Read 4949 times)
0 Members and 1 Guest are viewing this topic.

unsupported

Sr. Member

Offline

Posts: 318

Unofficial Newbie Moderator

What are your recommendations for Incident Response books?

« on: February 11, 2009, 11:35:15 AM »

I was planning on going for GCIH, but our companies budget hadn't gone through, so I moved to my backup plan for CEH. I still want to get a grasp on IR doing self-study with hopes of getting my company to send me to GCIH training. I wanted to start reading Counter Hack Reloaded, but wanted to know what other recommendations everyone has for IR.

Thank you!


	Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP

Jhaddix

Sr. Member

Offline

Posts: 317

Re: What are your recommendations for Incident Response books?

« Reply #1 on: February 11, 2009, 12:22:37 PM »

Hey Unsupported!

I would start by looking at the free resources here:

http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,3488.msg16165/#msg16165

And Security Focus has some good (a little old) whitepapers too:

http://www.securityfocus.com/incidents

As for a book, other than GCIH books i only own:

Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Which is a classic imo

Good luck!


	Logged

GSEC, GPEN, GWAPT, ECPPT, WAHHlive, LSOAdvancedPenTester

http://www.securityaegis.com
http://www.pentesterscripting.com
http://code.google.com/p/pentest-bookmarks/

jason

Hero Member

Offline

Posts: 1012

Re: What are your recommendations for Incident Response books?

« Reply #2 on: February 11, 2009, 03:29:28 PM »

Also:

http://www.amazon.com/Incident-Response-Computer-Forensics-Toolkit/dp/0764526367/ref=pd_sim_b_2

http://www.amazon.com/Incident-Response-Computer-Forensics-Second/dp/007222696X/ref=pd_sim_b_7

http://www.amazon.com/Principles-Incident-Response-Disaster-Recovery/dp/141883663X/ref=pd_sim_b_20

http://www.amazon.com/Incident-Response-Kenneth-van-Wyk/dp/0596001304/ref=pd_sim_b_27

Some of these are getting a bit long in the tooth now...


	Logged

Jhaddix

Sr. Member

Offline

Posts: 317

Re: What are your recommendations for Incident Response books?

« Reply #3 on: February 11, 2009, 07:38:34 PM »

Also I hear good things about

Incident Response and Computer Forensics, Second Edition
By Chris Prosise, Kevin Mandia, Matt Pepe

and its on EH's Chris Gates book wishlist =)


	Logged

GSEC, GPEN, GWAPT, ECPPT, WAHHlive, LSOAdvancedPenTester

http://www.securityaegis.com
http://www.pentesterscripting.com
http://code.google.com/p/pentest-bookmarks/

Equix3n-

Sr. Member

Offline

Posts: 386

Re: What are your recommendations for Incident Response books?

« Reply #4 on: February 13, 2009, 04:35:02 AM »

Hello unsupported!

The links by Jhaddix and Jason pretty much covers it all and I think would be sufficient to help you get a good grasp of the subject.
In case you want some reviews of the books you should go for I suggest reading this article by Tony Bradley. Perhaps these would be enough to give you a nice start.


	Logged

timmedin

Sr. Member

Offline

Posts: 469

Re: What are your recommendations for Incident Response books?

« Reply #5 on: February 14, 2009, 02:03:07 PM »

NIST has lots of great papers on this (and other) subjects. NIST 800-61 is a great resource. I especially found the example scenarios helpful since it will allow you to go through some example situations before (hopefully) one actually happens.

csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf


	Logged

twitter.com/timmedin | http://blog.securitywhole.com

Pages: [1] Go Up

« previous next »

Jump to: