Hardware and software

- [Instructor] The next area to consider in your preparation … you're going to need inside your instant response toolkit … for you to be effective during a response. … It's important to figure this out during the preparing stage … because your organization needs to purchase all these items, … configure them and train your teams how to use them all … before an incident actually occurs. … The first thing you're going to need … digital forensics workstation and backup devices. … These are used to make disk images, … capture logs and save other information … during your evidence collection within the incident. … A forensics workstation will also be used … to conduct analysis of any disk images … that are captured by members of your team. … like the forensic toolkit known as FTK or EnCase. … These software packages are quite expensive … and can run between 5 and $10 thousand or more. … They also require proper training to use them effectively … so it's important to budget … for their annual license and training costs …