FAQ: Incident Response on Windows

Courses Help
1

This FAQ, collaboratively created by the community, addresses the contents of the course titled “Incident Response on Windows”.

This course includes these lessons:

  • How to Create Incident Response Plan?
  • Incident Response Procedure
  • 3 Important Things
  • Free Tools That Can Be Used
  • Live Memory Analysis - 1
  • Live Memory Analysis - 2
  • Users
  • Task Scheduler
  • Services
  • Registry Run Keys / Startup Folder
  • Files
  • Additional Solutions
  • Checklist

You can locate this exercise within the LetsDefend content:

2

hello i need help in Live Memory Analysis - 2

3

I couldn’t find it. Does anyone know?

4

Look at the Menu in Process Hacker. Navigate to View

Once in View —> Select Tray icon —> Select Network History
You should be able to access the information and view the file

image
image705×392 70.1 KB