CC12 - The Best Free Resources to Get Started in Incident Response

CactusCon 12 (2024) Talk
The Best Free Resources to Get Started in Incident Response

People looking to get started in Incident Response and Forensics usually have the difficulty of trying to find training and resources that aren't super costly. Fortunately, there are a ton of amazing resources that don't cost a thing. All you need is someone experienced in the field to show you which resources you can trust to help you quickly gain the knowledge and experience you need to land your dream job in IR. This talk will cover a multitude of resources including Incident Response preparation; what kind of telemetry is available and needed; how to find some of the most valuable forensics artifacts; and free tools to collect, parse, and analyze data. The audience will come away with resources for learning, building labs, and more quickly becoming capable in incident response.

Speaker Bios:
Marcus Guevara
Marcus Guevara is a certified Digital Forensics and Incident Response instructor for the SANS Institute. Marcus previously spent time in the U.S. Air Force and U.S. Coast Guard performing Threat Hunting and Incident Response.