Some Concerns
This type of teamwork is not perfect. One of the most important things to keep in mind while working with system administrators and others who might be reporting a high-tech incident is that they might have already taken steps on their own to investigate or clean up a case. These can interfere with the case if the information is not disclosed. A way to prevent this is to always ask what steps the reporter took before and after noticing the incident.
The amount of pre-work performed by the reporter varies greatly, depending on the target of the crime. In corporate computer cases, the person in charge of the security of the system usually does a significant amount of investigating before reporting the issue to corporate security. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access