IR-004 / ACTIVE LAB

Incident Response Program

NIST-Aligned / Windows & Linux Infrastructure

ACTIVE LAB

I developed a NIST-aligned incident response plan for mixed Windows and Linux environments, covering reporting, triage, containment, recovery and post-incident review.

NIST SP 800-61WindowsLinuxIncident ResponseEvidenceRecovery

Architecture diagram for Incident Response Program — NIST-ALIGNED INCIDENT RESPONSE PLAN

Technical workflow for Incident Response Program — TECHNICAL TRIAGE / WINDOWS & LINUX EVIDENCE PATH

I created the plan to connect management decisions with the technical work performed during an incident. It defines how an incident is reported, scoped, analyzed, contained and recovered, and how lessons from the event feed back into preparation.