From the course: CompTIA CySA+ (CS0-002) Cert Prep: 6 Incident Response

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Introduction to forensics

Introduction to forensics

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 6 Incident Response

Start my 1-month free trial

Introduction to forensics

“

- [Narrator] Information security professionals, often find themselves asked to participate in many different types of investigations. In some cases, these are purely technical investigations of security incidents or other unusual circumstances. In other cases, security professionals may be called upon to assist law enforcement or other authorities in criminal and civil court cases. When asked to participate in the evaluation of electronic evidence, security professionals engage in a field known as digital forensics. The goal of digital forensics is to collect, preserve, analyze, and interpret digital evidence in support of an investigation. This includes everything from pulling data from a smartphone or laptop to analyzing network traffic logs. Digital forensic investigators have a wide variety of tools and techniques at their disposal, and must follow some basic principles when working with evidence. One of the…

Contents