“If you know the enemy and know yourself, you need not fear the results of a hundred battles.”
—Sun Tsu, The Art of War1
1. Sun Tsu (Author), Lionel Giles (Translator), The Art of War, El Paso Norte Press, 2005.
The Internet ecosystem is varied and complex. In any network forensic investigation, there are an enormous number of places where evidence may live, some more accessible than others. Often, network-based evidence exists in places that local networking staff may not have considered, leaving it up to the investigator to review the network diagrams and make suggestions for evidence collection.
On the flip side, many networks are configured for functionality and performance, not for monitoring or auditing—and ...