This section provides a more detailed treatment of IoT forensics, a crucial element of post-incident analysis activities. Forensics in the IoT poses a variety of unique challenges, but ubiquitous spread of IoT devices also introduces new forensics opportunities.
We will therefore discuss two facets of IoT forensics:
- Forensics of an IoT device that may been compromised (as part of an incident)
- Forensics in which the IoT devices are ancillary to the event, but useful in resolving questions surrounding it
