"Incident Preparation" from
Windows Forensics and Incident Recovery
by Harlan Carvey
As with death and taxes, incidents are inevitable. This month's eBook will address the various aspects of preparing your Windows infrastructure for the unavoidable, starting with perimeter devices (firewalls, routers) and ending with desktops, laptops, and servers. This eBook includes a rich set of guidelines for configuring systems as well as specific examples of setting and verifying various components of Windows security.
This eBook provides how-to's for:
- Learning the "lay of the land"
- Understanding what it is you're protecting
- Covering likely avenues of approach
- Preparing layered defenses
- Monitoring your defenses for early warning of an incident
By understanding what you are trying to protect and what protective options you have available -- and preparing your defenses accordingly -- you can completely prevent some incidents from occurring and inhibit and detect others.

