Incident Recorder

During an incident, things happen so fast that it’s hard to keep track. While there are many roles for an Incident response team, the most labor intensive, in the authors opinion, has to be the Incident Recorder. Being able to track an incident is also important if that incident has any legal ramifications. As forensic investigators know, creating a timeline and capturing relevant information is important if you need to go back and report details. This is why I have created the first of many programs called Incident recorder. the presentation will cover the perceived common steps in a Incident and how the open source tool can be used to help. This will be a short slide presentation followed by a demonstration of an automation tool for Security Incident recorders. It’s still being developed, but It is publicly available now in Beta from GitHub. Part of the presentation will also be feature requests for further development objectives. Incident recorder will also be the first stand-alone module in the automation project of Incident response.