The process of gathering evidence and information that allows for the creation of a theory of events explaining a security incident.

learn more… | top users | synonyms

4
votes
3answers
139 views

Ip tracking of stolen laptop

Somebody stole my laptop. I made a connection to it while he had Teamviewer still running. The police says that they can't start tracing the laptop because the IP is abroad. But what doesn't make ...
1
vote
2answers
70 views

Forensics in the cloud

I recently did a university module on digital forensics and learned a lot about the process, and techniques, of digital forensics investigations. We didn't actually cover the cloud although I ...
1
vote
2answers
139 views

How to trace virtual phone number?

Suppose I received a call from internet with some virtual number, I called the same number back after few days but it didn't exist at the time or it was routed to some other user. Is there a way to ...
-2
votes
1answer
59 views

Im getting my masters in cybersecurity and i have a bs in criminal justice.. need guidance [closed]

I'm getting my masters in cyber security. i have a bachelors in criminal justice. i would like to do missing and exploited children investigation. im relocating to georgia. What kind of job should I ...
1
vote
4answers
467 views

How does one go about network forensics investigation with no prior knowledge?

I am being asked to perform a forensics investigation on a network. The reason being that for the past few months strange things are happening on the network. VLANs are being deleted, configuration ...
2
votes
2answers
380 views

Google Account Compromised - Possible Investigation?

This morning, I've not been able to login to my Google Account. Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
2
votes
2answers
292 views

SOHO router intrusion

In the hypothetical scenario where someone has managed to gain unlawful access to a SOHO router (any of the consumer wifi models will serve nicely), what steps can you take to verify this, so as to ...
2
votes
2answers
230 views

What steps can I take to identify what type of compromise of my computer has occured

I got involved in a strange scenario today :-) . Some 'UDPAgent.exe' file/worm/virus was trying to access my collegue's system and the antivirum program was showing that this particular thing is ...