Gartner Blog Network


My Next Research Area: Incident Response

by Anton Chuvakin  |  May 23, 2013  |  3 Comments

It is with GREAT excitement that I am pre-announcing my next area of research focus – security incident response.

In brief, here is what I have in mind for the next few months:

  • Host and Malware Forensics Tools and Practices (title tentative), an assessment of the endpoint investigation tool scene (to complement my just-finished report on network forensics)
  • Incident Response in the Age of APT (title tentative), a guidance to doing incident response (from tools to teams!) in the modern era of industrial cyber-crime, APT and also cloud/virtual/mobile environments.

Some of the vendors I am speaking with or planning to speak are Crowdstrike, Mandiant,  Guidance Software, Carbon Black, some anti-malware/EPP vendors (who actually think  rather than milk). And of course, as with all Gartner GTP research, I am planning to have lots of conversations with enterprise CIRTs, other end users and whatever others sources of current IR wisdom…

Possibly related posts:

Additional Resources

Category: incident-response  security  

Tags: incident-response  security  

Anton Chuvakin
Research VP and Distinguished Analyst
8 years with Gartner
19 years IT industry

Anton Chuvakin is a Research VP and Distinguished Analyst at Gartner's GTP Security and Risk Management group. Before Mr. Chuvakin joined Gartner, his job responsibilities included security product management, evangelist… Read Full Bio


Thoughts on My Next Research Area: Incident Response


  1. Kobi says:
    June 4, 2013 at 7:32 pm

    Hi Anton

    would be happy to talk and introduce, we are doing mobile forensics in motion in a managed service model

    kobi

  2. Anton Chuvakin says:
    June 4, 2013 at 7:39 pm

    Thanks for the message.

    SInce you are a vendor/service provider, please request a briefing via http://www.gartner.com/it/about/vbriefings_faq.jsp

  3. Incident Response: The Death of a Straight Line says:
    June 5, 2013 at 12:05 pm

    […] Anton Chuvakin is a research director at Gartner's IT1 Security and Risk Management group. Before Mr. Chuvakin joined Gartner, his job responsibilities included security product management, evangelist… Read Full Bio Coverage Areas: ← My Next Research Area: Incident Response […]



Comments are closed

Comments or opinions expressed on this blog are those of the individual contributors only, and do not necessarily represent the views of Gartner, Inc. or its management. Readers may copy and redistribute blog postings on other blogs, or otherwise for private, non-commercial or journalistic purposes, with attribution to Gartner. This content may not be used for any other purposes in any other formats or media. The content on this blog is provided on an "as-is" basis. Gartner shall not be liable for any damages whatsoever arising out of the content or use of this blog.