Section 10

Forensics Process

Digital Forensics is the process for any forensics scene activity or investigation involving computer-based or network-based digital data in a system and/or network. This activity is usually in response to some incident, event, or activity that resulted in an Incident Response action. Forensics is the detailed process invoked during Incident Response when the event is found to have some legal, criminal, or civil component or potential result for the organization.

Keywords

Forensics process; preserve evidence; examination; analysis; report

Digital Forensics is the process for any forensics scene activity or investigation involving computer-based or network-based digital data in a system and/or network.

NIST developed and ...

Get Computer Incident Response and Forensics Team Management now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.