IR

Digital forensics

The structured investigation of a system after an incident, preserving evidence well enough to determine what happened and support legal action if needed.

Related terms

IR Incident response plan A written, rehearsed plan for the first hours and days of an incident. ATK Advanced persistent threat A patient, well-resourced attacker that stays hidden in a network over time.
← Back to Detection & response