Industry Standards and Frameworks

Several frameworks guide incident response and forensics practices:

NIST SP 800-61: Computer Security Incident Handling Guide ISO/IEC 27035: Information security incident management SANS Incident Response Process: Six-step methodology FIRST CSIRT Framework: Comprehensive incident response team services ENISA Good Practice Guide: European approach to incident management