Chapter 01 of 07 · Digital Forensics & Incident Response

Do Not Destroy the Evidence

The first thing you want to do is the thing that makes the rest impossible.

One-sided — This course reads evidence rather than producing it. The attack beat lives in the courses that teach the attacks — web security and the attacker's playbook — and every chapter here begins after somebody else has already run one.