GRR Rapid Response

In recent years, there has been an exponential growth in the number of security technologies becoming available to protect and defend organisations from both the unknown and known intruder. There is a common proverb “security is only as strong as the weakest link”, so what happens when your weakest link is exploited? In such situations, the need for a strong Incident Response (IR) strategy is inevitable. IR encompasses the approach to identify and remediate incidents at hand. However, many forensic technologies are emerging and are as equally important as the security products adopted by organisations today. GRR Rapid Response offers an open source remote endpoint and live forensic tool to be used by organisations not only within incident response, but also in active threat hunting and routine monitoring activities.

Aaron Momi and Haider M. al-Khateeb provide an insight into Google’s Incident Response Framework.

Find out more - subscribe to DFM today and read the full article. Or if you're a subscriber, login and read the article online.