ConceptsInvestigation Notes
Investigation Notes
The contemporaneous record an analyst keeps during an investigation, what was checked, found, and concluded, so the work is documented, defensible, shareable in handoffs, and useful for review and lessons learned.
7 direct links1 lesson
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
Post-Incident Review
The most substantial related concept here, covered by 13 lessons.
Relatedsorted by lesson coverage
Post-Incident ReviewStart here
13
lessons
Disposition
7
lessons
Evidence Collection
7
lessons
IR-SOC Boundary
6
lessons
Handoff
1
lesson
Investigation Scope
1
lesson
Show 1 more connection
Related Lessons
1 lesson covers this conceptSign in to open lesson content directly.