Tools and techniques

Emre Tinaztepe – The case: a modern approach to DFIR

We are facing more and more cyber incidents every day, not only in number but also in complexity and severity. Companies all around the globe are searching for methodologies and a systematic approach for responding to these ever-increasing cyber threats. Digital forensics, which started as a branch of law enforcement 40 years ago, is still the most applicable and valid method for illuminating what was formerly known as "The Case".

Digital forensics is the process of acquiring, preserving, and analyzing digital evidence in a way that will be accepted by any institution without leaving a hole in the trustworthiness of the evidence in question. At its core, digital forensics is a forensic science that requires a systematic approach that should also be non-reputable.

If you take a look at the history of digital forensics, you will see that it all started with financial fraud. This led...