​Question: Incident Response (IR)

Question: Incident Response (IR)

undefined

Suppose that you have been alerted of a potential incident involving a suspected worm spreading via buffer overflow techniques, compromising Microsoft IIS Web servers. As the IR Team leader, it is your responsibility to determine the next steps.

undefined

Write a one to two (1-2) page paper in which you:

undefined

• Explain in detail the initial steps that would need to be made by you and the IR team in order to respond to this potential incident.
• Identify which containment strategy would be appropriate in this case, and why?

undefined

1. Detail the incident recovery processes for the resolution of this incident.

undefined

Your assignment must follow these formatting requirements:

undefined

• Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; all references should be cited.
• Include a cover page containing the title of the assignment, the student’s name, the instructor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.