Wrap-up

1. Wrap-up

Congratulations, you’ve completed this section. You now have the foundation you need to successfully respond to a security incident. You’ll also be able to share your newfound understanding with future employers and other security operations professionals. You’ve learned a lot. Let’s do a quick review. First, you learned about the incident response process and about preserving and handling evidence like a pro. Next, you learned about the Chronicle SOAR and Chronicle SIEM platforms that security teams use during the incident response process, and how they provide oversight and access to multiple tools and information at the same time. Next, you learned about the attributes of high-quality documentation, what great documentation should include, and how to address documentation during an incident. After all, an incident investigation is only as good as its documentation. Finally, you learned about the tools of the trade and how to leverage automation to work smarter, not harder. You also learned about playbooks and how they enable you to focus on the important aspects of the incident response process. Continue moving forward on your learning journey, and keep building your foundational understanding of the incident response process. Great work.

2. Let's practice!

Create Your Free Account

By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.