How to Recognize and Support Investigations
This section discusses concepts related to supporting security investigations. You should be familiar with the processes in an investigation. You should know all the fundamentals of collecting and handling evidence, documenting your investigation, reporting the information, performing root cause analysis, and performing digital forensic tasks. Evidence collection and handling. Like a crime scene investigation, a …