CompTIA Security+ Study Guide, 8th Edition

Chapter 15Digital Forensics

THE COMPTIA SECURITY+ EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 2.0. Architecture and Design
  • 2.7 Explain the importance of physical security controls
• Domain 4.0. Operations and Incident Response
  • 4.1 Given a scenario, use the appropriate tool to assess organizational security
  • 4.5 Explain the key aspects of digital forensics

Digital forensics provides organizations with the investigation and analysis tools and techniques to determine what happened on a system or device. Digital forensics may be carried out to respond to legal holds and electronic discovery requirements, in support of internal investigations, or as part of an incident response process. Digital forensics even has a role ...