From the course: Incident Response: Evidence Collection in Windows
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Creating a report
From the course: Incident Response: Evidence Collection in Windows
Creating a report
- [Instructor] Now that we've learned how to perform all of the actions needed to properly collect evidence on a Window's workstation, it's really important for us to discuss some proper note-taking techniques. Now any time you're collecting evidence, you should document what you're doing as part of your incident response. Even if you aren't intending to pursue criminal charges in your specific case, you should still document everything because it allows others to help in the incident response and know exactly what actions you've taken and what the results were. Now when you arrive on a scene, you should document exactly what you see. You should do this using a digital camera or by taking very detailed notes. What is on the computer screen? Are there any devices like USB thumb drives or external hard drives that are connected? What about a network cable? These are all the details you need to write down in your notes.…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.