Analysis of Windows Operating Systems in Incident Response Processes in Cyber Wars

Abstract

Although Windows is the most popular operating system in the world, it has many vulnerabilities, depending on its version. Due to these vulnerabilities, attackers can capture sensitive data and cause irreversible damage. Examination of these vulnerabilities and analysis of malicious codes can be done with open-source tools. Analyzing affected services in a cyber war is important to prevent the future attacks and prevent data breaches. Because, in every attack and every data breach, a trace is definitely left by the attacker(s). These traces help us identify the culprit and the magnitude of the violation committed. In this study, open-source software tools that can be used in incident response process in Windows operating systems are reviewed. As it is shown, when such tools are used appropriately and timely, they can reduce the impacts of cyber attacks and help to prevent future cyber attacks.