Incident response

Incident response

Introduction Over the past decade, a destructive piece of malware has grown from a novel concept into a digital epidemic. Now ransomware is causing a serious

Incident response

Introduction Understanding network behavior is a prerequisite for developing effective incident detection and response capabilities. ESG research has found

Incident response

Introduction In this article, we’ll discuss some of the basic protocols that are commonly used in computer networking. A good understanding of computer netw

Incident response

Introduction Computer networking is one of the most important skills that incident responders are required to have. Analyzing network traffic as an incident

Incident response

Introduction A Remote Access Trojan (RAT) is part of the malware family. It enables covert surveillance, a backdoor channel and unfettered and unauthorized

Incident response

Introduction The Internet of Things (IoT) incorporates everything from tiny sensors and devices to huge structures like cloud computing. IoT includes the ma

Incident response

The Trivial File Transfer Protocol (TFTP) is designed to provide a bare-bones method of sending data from a server to a client. Its main use is for firmware

Incident response

 SSH protocol The Secure Shell (SSH) is designed to allow confidential and authenticated remote access to a computer. Like the Telnet protocol, it enables a

Incident response

Introduction Distributed Denial-of-Service (DDoS) attacks are one of the powerful cyber weapons threat actors use today. We often hear about a website being

Incident response

Wireshark is a freely available tool for network traffic analysis. It can be used to either analyze saved packet capture files or perform live traffic captur