Week 8: The Blue Team’s War Room (Lessons Learned for Incident Response Exercise)
This thread hosts the “War Room” for the Incident Response Exercise that is part of your final project for this course.
Last week, we discussed how the Red Team penetrated the Sifers-Grayson enterprise (the “incident”). This week, we will collect “lessons learned” from your analysis of the Red Team’s successes in exploiting vulnerabilities at Sifers-Grayson.
Your first posting to the war room this week should be a “Lessons Learned” analysis. You must include at least 5 specific “lessons learned.” For each item, provide a short title followed by a one paragraph description of (a) what happened, (b) the vulnerability that the Red Team exploited, and (c) the main “lesson learned” from this vulnerability or exploit. In your critiques and follow-up postings, provide additional information about the steps or measures that Sifers-Grayson could take to remediate or remove the listed vulnerabilities.
For your critiques this week, focus on the lessons learned and supporting analysis as presented by your peers (2).
For follow-up postings, contribute to the team’s work in the war room and offer suggestions for how the team can improve its incident response efforts by leveraging the lessons learned.
You can and should use information from the messages posted here as part of the incident response report which you will submit as your final project for this course.
