Tech Fixx · Video
Cyber Investigation Lifecycle: Report, Scope, Collect, Analyse & Report
Watch this 2 min 59 sec tutorial from the Tech Fixx channel, published .
Check that the device, software and version shown match your setup. Use the player controls for captions, playback speed and full screen where available.
Loading the player connects to YouTube. If playback is unavailable here, watch on YouTube ↗.
From the video description
A cyber investigation needs a repeatable lifecycle so responders can protect systems while preserving useful evidence. This guide follows an incident from the initial report through verification, scoping, collection, forensic analysis and final reporting.
You’ll learn: • Receiving and recording an incident report • Verifying the event and defining authority • Scoping affected users, hosts, accounts and time • Preserving volatile and persistent evidence • Maintaining chain of custody where required • Analysing and correlating artifacts • Communicating findings, limits and recommended actions • Reviewing lessons after containment and recovery
Chapters: 0:00 The Critical First Step 1:45 Reporting & Verification 4:30 Identification & Scope 7:15 Data Collection & Volatile Evidence 10:50 Forensic Analysis 13:40 Reporting & Documentation 15:20 Investigator’s Summary
NIST incident-forensics guide: https://csrc.nist.gov/pubs/sp/800/86/final
#CyberInvestigation #IncidentResponse #DFIR