For the most part, digital forensics investigations are still being performed in reaction to an event or incident where organizations must work quickly to gather and process digital evidence. Ultimately, the availability of relevant and meaningful digital evidence is a critical requirement to effectively manage business risk.
When conducting investigations in reactive mode, there is increased risk that the evidence necessary to establish credible facts and conclusions may not exist. Where organizations have identified opportunities to proactively gather digital evidence in anticipation of an event or incident, they will be better equipped to manage the impact of an event or incident, ...
Get Implementing Digital Forensic Readiness, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
