Incident Response and Digital Forensics Book Review

An excellent reference. A door to lead you into the profession of IT security with speciality on incident response. Highly recommended.

Great book beginning to end. I would highly recommend anyone in the DFIR, Security Operations, or threat intel community to make this a mandatory reading for new hires or individuals new to cyber security. Hopefully they will write another one in the next couple of years as technology and attack methods change rapidly. The first few chapters are great since it gives real life incident response scenarios that are seen in the community.

This is an excellent resource on Incident Response / Digital Forensics that I would quickly recommend to anyone serious about the topic. It's well-constructed with a logical flow, presented in an easily understandable manner. Well done.

The layout of text in the book makes it very hard to read. Its text is arranged like a novel which made me quickly lose interest.

This book is a collaboration between three highly respected DFIR examiners, including Kevin Mandian who was the founder of Mandiant—named Best Security Company by SC Magazine in 2012 and 2013 (now under FireEye). Although I have a background in DFIR, I had more experience in dead-box Digital Forensics and wanted to expand my knowledge and experience in IR, thereby prompting me to purchase this book. Although it is already four years old, the framework, workflow, and methods that the authors provide are still very relevant. In a nutshell, this book should be a manual in every DFIR’s reference shelve. For beginners, it lays down a clear and straightforward blueprint into IR investigations. For IR veterans, it serves as a refresher. If they wrote another on tomorrow, I would buy it immediately because the information is extremely useful.

Good introduction to IR. Lots of good procedural material in here. This is sort of the IR bible so I've heard from colleagues.

Bought for an IR class. Great read considering I'm supposed to be learning... :)

A "must-have" for the Information Security Engineer!

I love this book. It is probably the easiest to understand forensics book.

Excellent.

This book takes you through setup, organization, structure, where and how, case studies, plus provides rationale on why! Thumbs up!

Great book for mgt.

Great book!

The first 6 chapters are a bit repetitive, but after that's been seared into your memory it becomes a great guid. When you've finished it's nice to keep around for referencing.

Great read, very informative.

The book is a fine entry level book, but I expected more depth from the third edition to match the growth in maturity of the Digital Forensic Incident Response field in the last ten years. If you are already familiar with the earlier editions or are already working within Information Security I would not recommend this book.

The authors often make recommendations to Mandiant tools which shows the lack of diversity in the authors' background for this edition. It also feels like marketing may have been a driving factor in those choices which is not what I expect in a technical reference of this sort.

The material already feels dated and incomplete with no mention of Volatility or Powershell.

For those starting out I am sure it could be helpful, but I would consider time spent doing research on the topic on freely available blogs to be a far better use of your time.

Great resource

good book. highly recommend :)

Great sale

Better than expected

Very well written and organized book. I throughly enjoyed reading this book (half way through)

This is an excellent book for all classes of incident responders. The concepts are easy to follow and it provides references to the appropriate tools for the job.

Great read on IR topic. Finding lots of valuable content

its ok

Fantastic book to read and a great reference.