Discuss what next steps you should take as a defender

Assignment Help Computer Engineering

Reference no: EM133620292

Discussion Post: Mindset- Incident Response Procedures, Forensics & Forensic Analysis

In the lab activity for this discussion, you assumed different roles. After logging into the lab environment, you proceeded to "Launching an Attack" as a hacker. Once you completed that portion of the lab, you assumed the role of a defender and began the "Collecting Incident Response Data" portion of the lab. You then completed the lab as a defender by collecting log data and analyzing it. For this discussion, let's add to the scenario as follows:

As part of your system audit, you realize that you have identified a successful remote login from a suspicious IP address located in North Korea. This is a suspicious address because your organization has no ties to North Korea, and no personnel are over there for vacation or business-related travel.

In your initial post, discuss what next steps you should take as a defender.

Reference no: EM133620292

Questions Cloud

Reflect and evaluate your current self-care inventory. : What self-care resources will you use from your review of the NAMI website? Reflect and evaluate your current self-care inventory.

Explain advantage and disadvantage of software as a service : Prepare a research paper that defines and discusses software as a service. Explain advantages and disadvantages of the software as a service.

Barriers-facilitators and ethical considerations : Barriers, Facilitators, and Ethical Considerations: Describe the impact these items will have on your project implementation.

Leadership training program at your company : You've been asked to mentor a co-worker and recent college graduate who wants to join the leadership training program at your company

Discuss what next steps you should take as a defender : In the lab activity for this discussion, you assumed different roles. In your initial post, discuss what next steps you should take as a defender.

Monitor their tier-two and tier-three suppliers : Monitor their tier-two and tier-three suppliers. Seek out shadow factories to partner with. View their supply chain partners as long-term relationships.

Result in further shortening of the project duration : You should crash all the remaining tasks which, when crashed, will result in a further shortening of the project duration.

Describe your personal experience with the topic : You might describe your personal experience with the topic, what you learned in school, or what your assumptions are about the topic.

What strategies would you recommend to mitigate : What strategies would you recommend to mitigate the vulnerability and prevent data breaches and What ethical considerations arise when deciding whether

User Account

All Pages