Timeline for How does one go about network forensics investigation with no prior knowledge?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 6, 2013 at 17:54 | vote | accept | Franko | ||
| Mar 6, 2013 at 12:43 | comment | added | symcbean | +1: You're in dangerous territory here: the semantics of what is real investigation / evidence have not really been addressed - even if this investigation does not go outside your company there can be very damaging consequences for aynone you point the finger at. And bear in mind that the first thing you should learn about forensics is that you can't rely on any information you retrieve from a machine believed to be compromised (logs etc might provide hints - but there's always the possibilty they've been tampered with unless you have a SIEM designed to address this). | |
| Mar 5, 2013 at 16:07 | history | answered | grauwulf | CC BY-SA 3.0 |