Practical Incident Response

Ryan Kelleher
Aug 27, 2020

Greetings; first-time writer, long-time reader. With this quasi-blog meets serious attempt at improving my writing skills, I want to introduce those who bless me with their valuable time to some key areas in Digital Forensics & Incident Response.

So Hello!

Through this series, I will attempt to address the following functional areas within Security Operations:

  • Security Orchestration and Automated Response
  • Security Incident Response Platforms
  • Digital Forensics and Incident Response

I will attempt to keep topics to Free and Open Source toolsets (E.g., PLASO, The Hive, MISP, etc..) while breaking out installation, use, and automation of the toolset. I hope that together we can filter the noise and improve your process flows.

If I’ve piqued your interest, stay tuned; more to follow.

--

--

Ryan Kelleher

Associate Director of Information Security @ SAAS Company