Chapter 3
First Response
EnCE Exam Topics Covered in This Chapter:
- Incident response planning and preparation
- Handling evidence at the scene
How we respond to an incident or crime involving computers is largely based on how well we plan and prepare for such a response. History has proven repeatedly that even a mediocre plan is better than no plan. That having been said, the importance of proper planning and preparation can’t be emphasized enough.
Regardless of your response capacity, be it law enforcement officer, military personnel, civilian examiner, or member of an enterprise incident-response team, you will have certain issues and concerns in common with other forensics examiners. You will always need a plan. Because every incident is different, ...
Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
