Foreword xxiii
Introduction xxv
Chapter 1 Understanding the Bigger Picture 1
Chapter 2 Building a Cybersecurity Incident Response Team 51
Chapter 3 Technology Considerations in Cyber Breach Investigations 97
Chapter 4 Crafting an Incident Response Plan 143
Chapter 5 Investigating and Remediating Cyber Breaches 195
Chapter 6 Legal and Regulatory Considerations in Cyber Breach Response 243
Index 281
Andrew Gorecki is a cybersecurity professional with experience across various IT and cybersecurity disciplines, including engineering, operations, and incident response. Originally from Europe, he provided consulting services across various industry sectors in the U.S., the UK, and other European countries. At the time of writing, he manages a team of incident response consultants within the X-Force IRIS competency of IBM Security where he leads investigations into large-scale breaches for Fortune 500 organizations, delivers proactive incident response services, and provides executive-level consulting on building and optimizing incident response programs.