CY-BEGINNER-051Beginner · Digital Forensics
The First Hour — What To Do When You Find Something
You are not the investigator. Your job is to leave it possible for somebody else to investigate — and most of what makes that impossible is done by helpful people in the first ten minutes, or by a clock nobody at the company set.
11 hours8 chapters32 lessons225 activities8 labs
What you'll learn
- Separate finding out what happened from leaving it findable, and name the seven helpful actions that destroy evidence.
- Find out what is expiring in your own organisation before anything happens, and who can pause it.
- Write a contemporaneous note, photograph a screen properly, and tell one person who can act in three sentences.
- Keep a custody record that survives a busy week, hold the line on not looking, and hand over in four lines.
Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.