The process of gathering evidence and information that allows for the creation of a theory of events explaining a security incident.

learn more… | top users | synonyms

2
votes
2answers
260 views

SOHO router intrusion

In the hypothetical scenario where someone has managed to gain unlawful access to a SOHO router (any of the consumer wifi models will serve nicely), what steps can you take to verify this, so as to ...
2
votes
2answers
164 views

What steps can I take to identify what type of compromise of my computer has occured

I got involved in a strange scenario today :-) . Some 'UDPAgent.exe' file/worm/virus was trying to access my collegue's system and the antivirum program was showing that this particular thing is ...
2
votes
2answers
226 views

Google Account Compromised - Possible Investigation?

This morning, I've not been able to login to my Google Account. Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
1
vote
0answers
291 views

what the differences between cyber security, information security, computer forensics, digital forensics [closed]

what is the purpose or difference between of master cyber security, information security, computer forensics, digital forensics .i will to be computer investigator who is the best. Thanks
0
votes
4answers
158 views

How does one go about network forensics investigation with no prior knowledge?

I am being asked to perform a forensics investigation on a network. The reason being that for the past few months strange things are happening on the network. VLANs are being deleted, configuration ...
0
votes
0answers
121 views

I am looking for a solution of Virtual Humint [closed]

I am looking for a Virtual Humint solution. This solution should be used by investigators to collect data by hand from open sources such as web, social networks, chat, etc. by using a ghost/marked ...