Incident Response for Software Developers
This course teaches software developers (and the rest of IT) what incident responders need them to know during a security incident. Covers the concept of ‘need to know’, 'see something, say something', etc.
Welcome to Semgrep Academy!
Course Introduction
Your Instructor
Trigger Warning
What is Incident Response?
Security Incident vs Security Event
Why do You Need to Learn About Security Incidents?
How Expensive are Security Incidents?
Follow Your Organizations Security Incident Process
Who Should Handle Security Incidents?
#1: Report the Incident
#2: Don't Leave the Premises Without Telling the Security Team
#3: This is Your Number One Priority!
#4: Need to Know
Story Time: Need to Know
#5: Don't be a Hero
Introduction to Part 2
Incident Response Process
Inventory
Patch All That Can be Patched
Scan All That Can be Scanned
Threat Feeds
Virtual Patching
Backups and Rollbacks
Access and Accounts
Access to Logs
Tabletop Exercises
Disaster Recovery and Business Continuity Planning
The 6 Phases of a Security Incident
Post Mortem
Course Conclusion
Course Survey
Upcoming Semgrep Events!
Thank You for Choosing Semgrep Academy!
Developers, we're counting on you!