Triaging DFIR Investigations
Investigative Process Through the Use of Statistical Sampling
VIEW SLIDES & DOWNLOAD SCRIPT
Accelerate the Investigative Process
The volume of content available in some investigations can be overwhelming to the point that investigations are slowed and the size of the backlog increases. Learn how to accelerate the investigative process through the use of this statistical sampling method.
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
- /
Prioritize Evidence for Review
Download this presentation to review how this statistical sampling method can be applied to evidence collections and discover how the results can be used to rank or prioritize evidence for review.
- Understand how sampling may be used to triage files
- Identify areas that merit a more in-depth analysis
- Learn how to leverage technology by storing and indexing files
- Discover how to improve the Signal to Noise ratio