Chapter 20 – Forensics

Forensics – What is it? Main concerns Investigating and analyzing computer systems used in violation of laws Investigating computer systems for compliance with company policies Investigating computers systems that have been attacked. (part of incident response)