A1 Engagement Lifecycle Management

1) Benefits and utility of incident response to the client.

2) Awareness of steps that can be taken to prepare for potential incidents.

3) Structure of incident response engagements, including the relevant processes and procedures.

4) Knowledge of appropriate actions that should be taken when investigating an incident. Understanding that some actions should be avoided due to risk of evidence corruption.

5) Know how to safely handle malware and potentially malicious files encountered during an engagement.

6) Understanding limitations of system logs.