Hands-on Incident Response and Digital Forensics

INTRODUCTION

This book covers two closely intertwined, yet regularly competing, disciplines: incident response and digital forensics. One often leads to, or from, the other, and to say that their relationship is complex would be an understatement.

On paper these two topics would seem go together, in perfect harmony, rather than up against each other as combatants. The truth is, however, that in the midst of a security incident, in a time of always-on services and applications, most organisations will take the path of least resistance to getting back to an operational state, and frequently this means not properly conserving potential evidence that is vital for a successful forensics investigation. After all, most organisations aren’t in business ...