← All events
WorkshopOnlineDFIRInvestigationIncident Response

Incident Response: Investigating Identity Changes Efficiently

GMTOnline2 hours

Hands-on workshop on using Forestall's timeline and diff views to investigate identity-related incidents quickly.

What you’ll learn

  • Using Forestall timeline views for IR triage
  • Correlating identity changes with security events
  • Building IR playbooks with identity context

Speakers

  • Olga PetrovIR Lead, Forestall

Agenda

  1. IR fundamentals for identity changes (15 min)
  2. Forestall timeline and diff views (25 min)
  3. Hands-on: investigating a mock incident (40 min)
  4. Playbook building exercise (30 min)
  5. Wrap-up (10 min)

See your identity exposure clearly.

Start with a walkthrough or schedule a PoC.

We respect your privacy

We use cookies to keep this site secure and working properly. With your permission, we also use optional cookies to understand usage and improve the experience. Cookie Policy

You can change your choice at any time.

Incident Response: Investigating Identity Changes Efficiently | Events | Forestall