Intro to DFIR: The Divide and Conquer Process (3 hours)
Learn a systematic approach to intrusion investigations, including a framework for categorizing artifacts that may contain DFIR evidence, how to analyze those artifact categories, and the benefits of an automated approach.