OWASP Incident Response Project

• Main
• FAQs
• Acknowledgements
• Road Map and Getting Involved
• Project About

OWASP Incident Response Project Description This project is a guide of suggested best practices for stand-alone IR of a web application on dedicated hardware that you have 100% access to as well as when the application is part of a cloud service offering. The goal is to provide a best practices checklist that can be used to ensure chain of custody and to assist with investigations of root-cause. Licensing The OWASP Incident Response Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

What is the OWASP Incident Response Project? The OWASP Incident Response Project provides: Fundamental principals for a incident response program Presentation <link> Project Leader Tom Brennan Yolanda Baker Related Projects OWASP Top 10 OWASP Cheat Sheets OWASP Mod_Security CRS Web Hacking Incident Database

Quick Download Check Back Soon News and Events Project meeting AppSecUSA 2015 Collaboration at upcoming chapter meetings NYC OWASP Meeting In Print This project WILL be available as a publication when released. Classifications

Q1 Will this project help me respond to a computer security breach

A1 Yes, we are providing a sample IR plan and related reference materials to get started review this Top Considerations

Q2 Is there a googledoc associated with this project or a wiki page?

A2 Yes with your @owasp.org email address you can access the google docs page click here

Volunteers

Incident Response Project is developed by a worldwide team of volunteers. The primary contributors to date have been:

• Tom Brennan, ProactiveRISK
• <insert your name>
• <insert your name>
• <insert your name>
• <insert your name>

Want to help? Get in touch with us

Others

• OWASP NYC Metro Chapter

Involvement in the development and promotion of OWASP Incident Response Project is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

• Proof Reading
• Graphic Design
• Conduct Industry Survey
• <insert your idea>

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Incident Response Project (home page) Purpose: OWASP Incident Response Project will provide users with a current set of tools and best practices for dealing with a hacked web application. License: Creative Commons Attribution ShareAlike 3.0 License (best for documentation projects) who is working on this project? Project Leader(s): Tom Brennan @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Key Contacts Contact Tom Brennan @ to contribute to this project Contact Tom Brennan @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases