Digital Forensics Basics: A Practical Guide Using Windows OS

© Nihad A. Hassan 2019

Nihad A. HassanDigital Forensics Basicshttps://doi.org/10.1007/978-1-4842-3838-7_4

4. Initial Response and First Responder Tasks

Nihad A. Hassan¹ 

(1)

New York, New York, USA

 

What you should do upon arriving to the crime scene

When an incident that involves digital evidence is reported, the entity (public agency or private laboratory) responsible for conducting the investigation will send one or more individuals to investigate the case; this person is called the “first responder,” and he/she is responsible for conducting the initial investigation of the incident to determine its root cause.

The first responder can come from different backgrounds: he/she might be a network administrator, system administrator, law enforcement ...