Event Details

ONE-ISAC Biweekly Analyst Threat Call – BATC (Members Only)

View Calendar
April 2, 2025 10:00 am - 11:00 am

ONE-ISAC Biweekly Analyst Threat Call - BATC (Members Only)

Presenter: Cloud Range

Title: Creating an Incident Response Toolkit

Speaker: Dr. Duane Dunston

Abstract:

An Incident Response Toolkit is essential for quickly detecting and analyzing potential cybersecurity incidents. It enables organizations to collect critical forensic data, identify anomalies, and improve overall incident response readiness.
In this webinar, participants will learn how to:

  • Build an effective incident response toolkit to support forensic investigations
  • Collect forensic artifacts based on the order of volatility
  • Preserve and analyze collected data to detect malware and anomalies
  • Select and utilize the right tools for collecting host data

Participants will see the toolkit in action during a simulated cyberattack on Cloud Range’s cyber range, followed by a live analysis of the results. Additionally, attendees will receive access to the source code and compiled binaries for a toolkit that runs on Windows, Linux, and MacOS.