If you’re handling evidence, then you’ll need to follow a strict chain of custody. In this video, you’ll learn about chain of custody and how it can assist with the resolution of security incidents.
Chain of Custody – CompTIA Security+ SY0-401: 2.4 Read More »
Processing a security incident can be an expensive endeavor. In this video, you’ll learn the importance of proper expense accounting and why tracking these details is an important consideration.
Tracking Man-Hours and Expenses – CompTIA Security+ SY0-401: 2.4 Read More »
There’s sometimes no replacement for having a first-hand account of an incident. In this video, you’ll learn the advantages and disadvantages of interviewing witnesses.
Interviewing Witnesses – CompTIA Security+ SY0-401: 2.4 Read More »
There are many ways to capture the information that appears on a screen. In this video, you’ll learn a few techniques for taking screenshots across many different operating systems.
Taking Screenshots – CompTIA Security+ SY0-401: 2.4 Read More »
How can you tell if a digital file on a piece of storage media has been altered? In this video, you’ll learn about hashing, and I’ll demonstrate how to compare hashes with a file that has been altered.
Time is relative, and that’s certainly the case with a computer’s internal clock. In this video, you’ll learn how operating systems count time and how a computer’s timezone setting can change how you look at data.
Recording Time Offsets – CompTIA Security+ SY0-401: 2.4 Read More »
A video can sometimes provide much more information that weeks of log files. In this video, you’ll learn some strategies for collecting evidence with video.
Capturing Video – CompTIA Security+ SY0-401: 2.4 Read More »
The packets traversing network can be a wealth of information. In this video, you’ll learn how to collect information from network traffic and logs.
Capturing Network Traffic and Logs – CompTIA Security+ SY0-401: 2.4 Read More »
Imaging a system can be a very effective way of preserving evidence. In this video, you’ll learn about system imaging and some strategies for obtaining system data without directly imaging a storage drive.
Capturing System Images – CompTIA Security+ SY0-401: 2.4 Read More »
Not all data sticks around, and some data stays around longer than others. In this video, you’ll learn about the order of data volatility and which data should be gathered more urgently than others.
Order of Volatility – CompTIA Security+ SY0-401: 2.4 Read More »
