ConceptsEvidence Collection
Evidence Collection
Gathering and preserving the data that supports an investigation, logs, artifacts, screenshots, and records, in a sound, documented way so it accurately reflects what happened and can support decisions or later review.
12 direct links7 lessons
Concept Neighborhood
Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons
Start here
Context Gathering
The most substantial related concept here, covered by 7 lessons.
Builds towardEvidence Collection is a foundation for these
Related Lessons
7 lessons cover this conceptThe SOC Analyst Role in Depth
SOC Analyst
A Structured Methodology for Alert Triage
SOC Analyst
Investigation Deep Dive: Pivoting Through Telemetry
SOC Analyst
Documentation and Case Management
SOC Analyst
Working with Incident Response and Other Teams
SOC Analyst
Common Alert Categories and Response Playbooks
SOC Analyst
Skills, Certifications, and Career Development
SOC Analyst
Sign in to open lesson content directly.