CompTIA CySA+ Study Guide, 3rd Edition

Chapter 13Performing Forensic Analysis and  Techniques for Incident Response

THE COMPTIA CYBERSECURITY ANALYST (CYSA+) EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 3.0: Incident Response and Management
  • 3.2 Given a scenario, perform incident response activities.
    • Detection and analysis
  • 3.3 Explain the preparation and post-incident activity phases of the incident management life cycle
    • Post-incident activity

Computer forensic investigations are used to determine what activities, changes, and other actions have occurred on a system, who or what performed them, and what data is stored there. This means that computer forensic techniques are used in a variety of scenarios, including incident response, police investigations, ...