Tag: DFIR Products & Solutions

How to analyze USB device history? [Windows]

Posted on December 27, 2021 by - Digital Forensics Blog - Binalyze

Whether you are investigating an endpoint in your corporate environment or you are part of a criminal investigation, you need to investigate the USB device history of an endpoint.  Knowing what USB devices were connected to the computer is the essential information and of great importance to a forensic examiner.

Another Industry First: Compare a Forensic Snapshot against a Baseline Image!

Posted on December 24, 2021 by - Digital Forensics Blog - Binalyze

When responding to a cybersecurity incident, spending a lot of time analyzing forensic artifacts is a luxury that none of us have. Let’s say you have an incident in an organization with thousands of servers and clients, analyzing the compromised environment will take weeks, even months. 

The Tenth Step to Forensic Readiness: Legal review

Posted on November 3, 2021 by - Digital Forensics Blog - Binalyze

When we plan our incident response strategies and forensic readiness steps, we strongly pay attention to digital evidence acquisition, storage, handling, reporting, and remediation. While these stages are of essential importance for the overall cyber posture of your organization it is more than important as well, throughout each of these steps, to include legal risks and considerations.