0

I am working on putting together an Incident Response Jump Bag (detailed here).

Any suggestions on what type of container/bag to use for this? It seems like a lot of little items that could be packaged together, and some big items.

I have a messenger bag and backpack, but they don't really seem to cut it.

Anything else that I should take into consideration? (chain of custody issues, etc?)

Community
  • 1
Josh Brower
  • 1,366
  • 2
  • 13
  • 24
  • 2
    This is really borderline security question... – AviD Jan 14 '11 at 00:38
  • 2
    I have to agree with AviD, the fact that the things in the bag are for ITSec purposes is secondary and only slightly relevant to the actual question, which is about packing. Perhaps you could propose Packing.SE on Area51. – Matthew Read Jan 14 '11 at 01:34
  • I have edited the question to better reflect what I am looking for. – Josh Brower Jan 14 '11 at 04:00
  • 1
    I think this is a borderline question, but I think I'm fairly happy to have it here even if all it does is prompt people to think about things like chain of custody, which they might not otherwise... – Rory Alsop Jan 14 '11 at 09:12
  • Ah, I think the chain of custody is a very good *on* topic issue. Maybe turn some more focus to that, and other possible IR-specific issues, instead of asking your mom to pack your schoolbag :) – AviD Jan 14 '11 at 09:16
  • @Avid lol, well, I guess you can tell alot about a person by the questions they pose. I never was good at packing my lunchbag... :) – Josh Brower Jan 14 '11 at 11:53

1 Answers1

4

Depending on the amount of kit you require in your jump bag, you may want a wheeled trolley case or a rucksack, to avoid injury (speaking from experience, I once had to implement a wireless honeypot as part of incident response and the kit included 5 laptops (running simulations, logging etc) and my back ached for weeks)

In any case the only real restriction I would advise is keeping it below airline maximum size and weight considerations - putting forensic kit in hold luggage on the return effectively breaks the chain of custody, and if you do have to fly, leave your screwdrivers/multitool at home in case you aren't allowed to fly with it.

Rory Alsop
  • 61,367
  • 12
  • 115
  • 320