Tech Fixx · Video
Cyber Investigation Lifecycle: Report, Scope, Collect, Analyse & Report
Watch this 2 min 59 sec video from the Tech Fixx channel, published .
Check that the device, software and version shown match your setup. Use the player controls for captions, playback speed and full screen where available.
Loading the player connects to YouTube. If playback is unavailable here, watch on YouTube ↗.
Captions and text transcripts
After loading the player, use its CC control to turn on captions when available. To look for a text transcript, use the Watch on YouTube link above, expand the video description and select “Show transcript” if offered.
Caption and transcript availability varies by video, and automatic captions may contain mistakes. The original channel description is separate from a transcript. Caption accuracy, audio description and text alternatives have not been verified for every video in this library.
From the video description
Original channel description, recorded . Product, software and service references in it may have changed since publication.
A cyber investigation needs a repeatable lifecycle so responders can protect systems while preserving useful evidence. This guide follows an incident from the initial report through verification, scoping, collection, forensic analysis and final reporting.
You’ll learn: • Receiving and recording an incident report • Verifying the event and defining authority • Scoping affected users, hosts, accounts and time • Preserving volatile and persistent evidence • Maintaining chain of custody where required • Analysing and correlating artifacts • Communicating findings, limits and recommended actions • Reviewing lessons after containment and recovery
Chapters: 0:00 The Critical First Step 1:45 Reporting & Verification 4:30 Identification & Scope 7:15 Data Collection & Volatile Evidence 10:50 Forensic Analysis 13:40 Reporting & Documentation 15:20 Investigator’s Summary
NIST incident-forensics guide: https://csrc.nist.gov/pubs/sp/800/86/final
#CyberInvestigation #IncidentResponse #DFIR