Digital Forensics and Incident Response - Second Edition

Communications

One area of consideration that is often overlooked by organizations is how to communicate within a larger organization during an incident. With email, instant messaging, and voice calls, it may seem as though organizations already have the necessary tools to appropriately communicate internally. These communications platforms may need to be set aside in the event of an incident impacting user credentials, email systems, or other cloud-based collaboration platforms. For example, a common attack being observed is compromises of the Office 365 cloud-based email. If attackers have gained access to the email system, they may have also compromised associated instant messaging applications, such as Skype. Given this, relying on such ...