D431 Task 1 - Task 1 1. ) in order to efficiently gather as much evidence as possible while minimizing impact on the organization, i will execute an incident response plan as is. 1. discuss the strategy. Strategy to maximize collection of evidence while minimizing impact on business: The first step that i will take is to notify all relevant stakeholders and managers that a meeting will be held to. First we will review security footage, server and workstation logs to determine what mr. Smith accessed and where it was accessed from. We will then secure those areas by. Discuss the strategy that your team will use to maximize the evidence collection and minimize the impact on the organization. The first step in this process is to assemble an. Ftk imager will allow the investigators to acquire copies of the drives and volatile data so that it can be examined later without altering the original data. Ftk imager also allows. (a. 1) a balanced collection in order to maximize the collection activities while maintaining minimal impact on business operations the investigation team should hold a.
Task 1 1. ) in order to efficiently gather as much evidence as possible while minimizing impact on the organization, i will execute an incident response plan as is. 1. discuss the strategy. Strategy to maximize collection of evidence while minimizing impact on business: The first step that i will take is to notify all relevant stakeholders and managers that a meeting will be held to. First we will review security footage, server and workstation logs to determine what mr. Smith accessed and where it was accessed from. We will then secure those areas by.