Incident Response as a Recovering Pentester | I.R. Summit 2024
/// 🔗 Register for webcasts, summits, and workshops -
https://blackhillsinfosec.zoom.us/ze/...
Incident Response as a Recovering Pentester - Alter Basaran
Hi, my name is Alper and I’m a Penetration Tester and your Incident Responder.” Over the past year our company has sent me to more incident response engagements than penetration tests. The first few were horribly stressful, then I found ways to leverage my penetration testing experience and everything became much easier.
I’ve transitioned to incident response after 15 years working in penetration testing and I now see how the experience I had gained in penetration testing has provided me with skills and knowledge that has helped me become a fairly good incident responder.
This talk aims to cover specific skills penetration testers have which can be useful for all six steps of incident response. This talk also covers some specific functions of security such as threat modeling and source code analysis which, once integrated in the SOC process will help all organizations be better prepared for incidents.
00:13 - whoami
00:29 - Incident Overview
02:22 - Asking questions with a pentester mindset
04:34 - Pentest & IR compared
18:31 - Transferable skills
18:53 - PICERL
23:30 - DeTT&CT
/// 📄 View our Pay-What-You-Can Courses
https://www.antisyphontraining.com/pa...
/// 📄 View the Antisyphon Course Catalog
https://www.antisyphontraining.com/co...
/// 📄 View Our Live Training Course Calendar
https://www.antisyphontraining.com/tr...
/// 📄 Antisyphon Training Roadmap
https://www.antisyphontraining.com/tr...
///Antisyphon Socials
Twitter: / antisy_training
Mastodon: https://infosec.exchange/@Antisy_Trai...
LinkedIn: / antisyphon-training
Discord: / discord
///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/tr...
On Demand Training: https://www.antisyphontraining.com/on...
///Antisyphon Shirts
https://spearphish-general-store.mysh...
///Educational Infosec Content
Black Hills Infosec YouTube: / blackhillsinformationsecurity
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube: / wildwesthackinfest
Active Countermeasures YouTube: / activecountermeasures
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/
#bhis #antisyphon #infosec #CyberSecurity #training