Chapter 8

Incident Response


This chapter looks at the stages of incident response for all types of incidents, from initial contact through seizure to transporting of evidence to the Forensic Laboratory. It examines the type of equipment and documentation that must be taken to the scene of an incident and the policies and procedures that are required for the safe and efficient processing of the scene of an incident. It addresses the way in which evidence must be handled and protected.


incident response; seizure records; imaging; evidence transportation

Table of Contents

Get Digital Forensics Processing and Procedures now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.