Incident Response on Linux

Incident response is an approach to managing a security incident process. An incident response plan is needed to approach security incidents systematically. A successful incident response plan includes the following 6 stages:

1. 1Lessons13 lessons

   1. 1.1How to Create Incident Response PlanPreview5 min
   2. 1.2Incident Response Procedure5 min
   3. 1.33 Important Things5 min
   4. 1.4Users and Groups12 min
   5. 1.5Processes10 min
   6. 1.6Files and File System5 min
   7. 1.7Mounts5 min
   8. 1.8Network5 min
   9. 1.9Service6 min
   10. 1.10Crontab5 min
   11. 1.11SSH Authorized Keys5 min
   12. 1.12Bash rc & Bash profile5 min
   13. 1.13Useful Log Files5 min