Tools that should be part of an effective response toolkit include:
- Forensics tools: These tools allow you to accurately examine digital media using processes that allow for the establishment of a legal, sound, audit trail ensuring that you can accurately do the following:
- Identify important investigative information for backup
- Preserve identified information for future analysis
- Analyze preserved information to uncover facts
- Act on facts through further investigation, response, or reporting
Open source tool examples:
-
- Backup tools: In most cases, it is safer to restore an ...