Forensics
The disciplined collection, preservation, and analysis of digital evidence to reconstruct what happened in an incident, performed soundly enough that the findings are accurate and could withstand legal scrutiny.
Concept Neighborhood
Start here
Incident Response
The most substantial related concept here, covered by 6 lessons.
Incident ResponseStart here
6
lessons
IR Evidence Preservation for Litigation
6
lessons
Chain of Custody
4
lessons
Cloud Forensics
2
lessons
Ephemeral Evidence
1
lesson
Forensic Analysts
1
lesson
Show 1 more connection
Related Lessons
6 lessons cover this conceptDesign a Sustainable SOC Operating Model
General Beginner
Understand the Blue Team Mission
General Beginner
Follow the Current Incident-Response Model
General Beginner
Measure Operations Without Gaming Them
General Beginner
Exercise the Response Capability Safely
General Beginner
Learn with Safety and Accountability
General Beginner
Sign in to open lesson content directly.