Part 2: Digital Forensics and Incident Response Fundamentals and Best Practices
In this section, you will learn about the Digital Forensics and Incident Response (DFIR) processes and best practices for conducting investigations inclusive of the Order of Volatility, Chain of Custody, Evidence Acquisition, and other incident procedures, to be able to conduct your own investigations in accordance with international best practices.
This part has the following chapters:
- Chapter 6, Understanding File Systems and Storage
- Chapter 7, Incident Response, Data Acquisitions, and DFIR Frameworks