WaterISAC conducted a briefing on the U.S. Department of Homeland Security's Hunt and Incident Response Team (HIRT) on Wednesday, September 12, 2018. A component of the National Cybersecurity and Communications Integration Center (NCCIC), HIRT provides onsite incident response, free of charge, to organizations that have experienced cyber attacks. When requested, HIRT can deploy a team to meet with an affected organization to identify infected systems, image drives for analysis, and collect other data to perform a thorough analysis. HIRT is also able to provide mitigation strategies and assist in restoring service and providing recommendations for improving overall network and control systems security.

Brian Draper, a Senior Incident Response Analyst with DHS HIRT, presented. His presentation addressed:

• HIRT Overview
• HIRT Service Offerings
• Proactive Hunt vs. Incident Response
• Incident Response Lifecycle
• Prioritizing Incidents
• Engagement Types
• Engagement Workflow
• How to Contact HIRT