1 \/
WGU C842 Cyber Defense and Counter Measures Tool1.incident handling response steps: 1. Preparation
2.Incident Recording
3.Incident Triage
4.Notification
5.Containment
6.Evidence Gathering and Forensic Analysis
7.Eradication
8.Recovery
9.Post-Incident ActivitiesIncident DocumentationIncident Impact
Assessment- Review and
Revise Policies- Close the
Investigation- Incident
Disclosure
2.Risk Assessment Management tools: PILAR – It helps incident handlers
to assess risks against critical assets of the organization in several
dimensions such as confidentiality, integrity, availability, authenticity,
and accountability<\/p>\n\n\n\n
2 \/
A1 Tracker
Risk Management Studio
3.Tools for Incident Analysis and Validation: buck-security – allows
incident handlers to identify the security status of a system. It gives
an overview of the security status of the system within a couple of
minutes
kiwi syslog server – It allows you to centrally manage syslog messages,
generates real-time alerts based on syslog messages, and perform
advanced message filtering and message buffering
splunk light – It is a tool for collecting, monitoring, and analyzing log filefrom servers, applications, or other sources
\u00aa Loggly (https:\/\/www.loggly.com) \u00aa InsightOps
(https:\/\/www.rapid7.com) \u00aa Logz.io (https:\/\/www.logz.io) \u00aa
Logmatic.io (https:\/\/www.logmatic.io) \u00aa Graylog
(https:\/\/www.graylog.org
4.Tools for Detecting Missing Security Patches: Microsoft Baseline
Security Analyzer – MBSA lets incident handlers scan local and remote
systems for missing security updates as well as common security
misconfigurations<\/p>\n\n\n\n
3 \/
\u00aa GFI LanGuard (https:\/\/www.gfi.com)
\u00aa Symantec Client Management Suite
(https:\/\/www.symantec.com) \u00aa MaaS360 Patch Analyzer
(https:\/\/www.ibm.com)
\u00aa Solarwinds Patch Manager (https:\/\/www.solarwinds.com)
\u00aa Kaseya Security Patch Management
(https:\/\/www.kaseya.com) \u00aa Software Vulnerability
Manager (https:\/\/www.flexera.com)
\u00aa Ivanti Endpoint Security (https:\/\/www.ivanti.com)
\u00aa Patch Connect Plus (https:\/\/www.manageengine.com) \u00aa Automox
(https:\/\/www.au- tomox.com)
\u00aa Prism Suite (https:\/\/www.newboundary.co
5.report writing tools: MagicTree – stores data in a tree structure
This is a natural way of representing the information that is gathered
during a network test: a host has ports, which have services,
applications, vulnerabilities, etc.
KeepNote – is used to store class notes, TODO lists, research notes,
journal entries, paper outlines, etc. in a simple notebook hierarchy with
rich-text formatting, images, and more
6.data imaging tools: FTK imager – It is a data preview and imaging tool
that enables analysis of files and folders on local hard drives,
CDs\/DVDs, and network drives
R-Drive image – buck-security allows incident handlers to identifying<\/p>\n\n\n\n
4 \/
the security status of a system. It gives an overview of the security
status of the system within a couple of minutes
\u00aa EnCase Forensic (https:\/\/www.guidancesoftware.com) \u00aa Data
Acquisition Tool- box (https:\/\/in.mathworks.com) \u00aa RAID Recovery for
Windows (https:\/\/www.run- time.org) \u00aa R-Tools R-Studio
(https:\/\/www.r-studio.com) \u00aa F-Response Imager (https:\/\/www.fresponse.com
7.tools for calculating hash value:
HashCalc MD5 Calculator
HashMyFiles
8.Collecting Volatile Information: System Information: Tools and
commands to collect the information: Systeminfo.exe (Windows)
PsInfo
(Windows) Cat
(Linux) Uname
(Linux)<\/p>\n","protected":false},"excerpt":{"rendered":"
1 \/WGU C842 Cyber Defense and Counter Measures Tool1.incident handling response steps: 1. Preparation2.Incident Recording3.Incident Triage4.Notification5.Containment6.Evidence Gathering and Forensic Analysis7.Eradication8.Recovery9.Post-Incident ActivitiesIncident DocumentationIncident ImpactAssessment- Review andRevise Policies- Close theInvestigation- IncidentDisclosure2.Risk Assessment Management tools: PILAR – It helps incident handlersto assess risks against critical assets of the organization in severaldimensions such as confidentiality, integrity, availability, authenticity,and accountability […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[25],"tags":[],"class_list":["post-114607","post","type-post","status-publish","format-standard","hentry","category-exams-certification"],"_links":{"self":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/114607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/comments?post=114607"}],"version-history":[{"count":0,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/114607\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/media?parent=114607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/categories?post=114607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/tags?post=114607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}