Did you know Cybrary's video training is FREE? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.
This lesson covers the preservation phase of investigation. This must take place quickly to make sure evidence of preserved accurately. Investigators must take careful and accurate notes and record information such as times and actions taken and be sure to initial and sign off on everything.
Incident Response Policy
Legal Aspects of Incident Handling
Subscribe to become an Insider Pro and get access to premium content such as: