IncidentResponsev2

2 - Identification Phase

This section contains the following playbooks and procedures:

• 2.01-Review_organizational_processes_and_conduct_a_site_survey
• 2.02-Create_Active_IP_List
• 2.03-DNS_Host_Name_Mapping
• 2.04-Active_Host_and_Service_Enumeration
• 2.05-Active_IP_List_on_Key_Ports
• 2.06-All_Port_Scan
• 2.07-Scan_ICS_Equipment_Ports
• 2.08-Conduct_Vulnerability_Scan
• 2.11-Determine_Installed_Software
• 2.12-Perform_SCAP_Configuration_Scan
• 2.13-Perform_STIG_Scan
• 2.14-Gather_AD_Structure_Information
• 2.15-AD_Configuration_Scan_with_Powershell
• 2.16-List_all_AD_Domain_Accounts
• 2.17-Scan_Device_For_Default_Admin_Password
• 2.18-Review_Organizational_User_Policies
• 2.19-Create_firewall_rule_list
• 2.20-Reivew_Firewall_Config_for_IOCs

Select the links above to access the specific procedures and details for this phase.