CHAPTER 2: BE PREPARED – PROACTIVE FORENSICS
Within an organisation, undertaking forensics is not a simple task and involves a series of procedural and technical aspects that if not carried out correctly will affect the forensic value of the investigation and the resulting evidence. It is therefore essential that these are developed, implemented and tested prior to tackling an incident. Being proactive about the design of a forensic expertise within your organisation will ensure that your incident response team is able to respond effectively and efficiently. This chapter introduces the steps necessary to be proactive, and discusses the key procedural aspects that need to be followed during an investigation.
Being proactive is not simply about ...
Get Computer Forensics: A Pocket Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
