Last Updated on August 14, 2021 by Admin
A security analyst captures forensic evidence from a potentially compromised system for further investigation. The evidence is documented and securely stored to FIRST:
- maintain the chain of custody.
- preserve the data.
- obtain a legal hold.
- recover data at a later time.