Incident Response for Windows

Table of Contents

1. Introduction to the Threat Landscape
2. Understanding the Attack Life Cycle
3. Phases of an Efficient Incident Response on Windows Infrastructure
4. Endpoint Forensic Evidence Collection
5. Gaining Access to the Network
6. Establishing a Foothold
7. Network and Key Assets Discovery
8. Network Propagation
9. Data Collection and Exfiltration
10. Impact
11. Threat Hunting and Analysis of TTPs
12. Incident Containment, Eradication, and Recovery
13. Incident Investigation Closure and Reporting