Presmike & Sippy - RETRI:Rapid Enterprise Triaging from Outerz0ne 5 (Hacking Illustrated Series InfoSec Tutorial Videos)

Feel free to include my content in your page via my
RSS feed Follow @irongeek_adc

Help Irongeek.com pay for
bandwidth and research equipment:
Subscribestar or Patreon

Search Irongeek.com:

Affiliates:

Help Irongeek.com pay for bandwidth and research equipment:

Presmike & Sippy - RETRI:Rapid Enterprise Triaging from Outerz0ne 5 (Hacking Illustrated Series InfoSec Tutorial Videos)

Presmike & Sippy - RETRI:Rapid Enterprise Triaging from Outerz0ne 5

The first part of this presentation presents a new paradigm for the Incident Response process called Rapid Enterprise Triaging (RETRI), where the primary objective is to isolate the infected network segment for analysis without disrupting its availability. Part two of this presentation will introduce a new Enterprise Incident Response tool that complements the RETRI paradigm. The tool is a free, possibly open source, agent-based tool that is deployed to the compromised segment to perform the traditional incident response tasks (detect, diagnose, collect evidence, mitigate, prevent and report back). The tool will be released at Blackhat 2009 / Defcon 2009 if all goes well.For now you get screen shots.

Pulled, hope to have it back up in a few months.

Special thanks to Scott and Brandon Moulton for the AV work, and SkyDog for letting me rip the videos.

Printable version of this article

15 most recent posts on Irongeek.com:

If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.