SANS Digital Forensics and Incident Response Blog: Tag - process

New, Cool and Sexy vs. Dull, Repetitive and Necessary

Computer forensics has a tendency to focus on the new, the cool and the sexy. I call it the NCS.

Most training, books, blogs, articles and so on have a tendency to focus on the NCS. NCS holds the audience's interest so much better and is more fun to talk about.

Unfortunately, most work in computer forensics does not focus on NCS. Most of the work is on the dull, repetitive and the necessary. The DRN.

This column will talk about the DRN.

Reporting

In the practice of digital forensics, each step has a tendency to build upon the last. While it's hard to make a call on the most important phase, reporting stands out.

The report is the output. It is what the layperson can access. The final product. The report is the culmination of all the work that has come before it and must be treated with the respect it deserves. Unfortunately, the report is also the prime example of the DRN to most people.

That said, let's lay out

... Continue reading New, Cool and Sexy vs. Dull, Repetitive and Necessary