Practical Internet of Things Security - Second Edition

IoT forensics

This section provides a more detailed treatment of IoT forensics, a crucial element of post-incident analysis activities. Forensics in the IoT poses a variety of unique challenges, but ubiquitous spread of IoT devices also introduces new forensics opportunities.

We will therefore discuss two facets of IoT forensics:

• Forensics of an IoT device that may been compromised (as part of an incident)
• Forensics in which the IoT devices are ancillary to the event, but useful in resolving questions surrounding it