Are You Ready? How to Prepare for a Security Incident
Posted: 2nd Sep 2022
When an incident occurs, the incident investigator will collect data from numerous sources within the organisation to determine whether or not there is a security incident. The investigator will request audit logs, transaction logs, intrusion logs, connection logs, system performance records and above all, User activity logs from firewalls, intrusion detection/prevention systems, routers, switches, servers, desktops, mainframes, business applications, databases, anti-virus, VPNs and any other system with a CPU.
Related Articles
- Cybersecurity exercise could be 'for real tomorrow' - NCSC
- How to Keep Your Company Data Safe When Employees Are Working in Remote and Hybrid Work Environments
- AI-driven cyber attacks to be the norm within a year, say security leaders
- The dual nature of GenAI within cybersecurity
- The inevitable risks and best defense for cloud cybersecurity
