Расследование и реагирование на ИБ-инциденты

What to do in the first minutes after a cyberattack? How to build a response and investigation process for information security incidents? In this new podcast episode, information security experts explore the full cyber incident management cycle—from attack detection to retrospective analysis. SOC tools, automation, the role of AI in investigations, and the key question: should you contain an attack or capture evidence first? Moderator: ▪️ Anastasia Fedorenko — Business Development Manager, R-Vision Experts: ▪️ Maxim Zhevnerev — Head of SOC Technology Development and Advanced Services, Solar ▪️ Stepan Panfilov — Lead Incident Investigation Analyst, UserGate ▪️ Vsevolod Salomadin — Head of Monitoring Group, R-Vision ▪️ Ruslan Lozhkin — Head of Information Security, JSCB Absolut Bank 🎯 This podcast will be useful for information security specialists, SOC managers, CIOs, CISOs, SOC/DFIR analysts, and anyone interested in cybersecurity and incident investigation. 00:00 Introduction 01:46 Stages of Response to Information Security Incidents 08:55 Allocation of IT and Information Security Responsibilities 15:06 Incident Response Plan 20:19 Response Tools and Automation 31:41 Minimizing Damage from Cyberattacks 37:42 When Response Becomes Investigation 46:58 Tools for Speeding Up Investigations 53:12 Incident Investigation Timelines 57:42 AI in Incident Investigation 01:02:20 Key Challenges of Response and Investigation 01:07:09 Best Response Practices 01:10:51 Containing an Attack or Capturing Evidence 01:14:13 Top 3 Investigation Tools 01:17:25 Conclusion 🌐 Our Social Media: Website: https://gdspace.ru/ VK: https://vk.com/globaldigitalspace Telegram: https://t.me/GDSpace RuTube: https://rutube.ru/u/GlobalDigitalSpac... YouTube:    / globaldigitalspace   Zen: https://dzen.ru/gdspace MAX: https://max.ru/globaldigitalspace