Timely acquisition of network traffic evidence in the middle of an incident response procedure, (Wed, Dec 25th)

Malware News
1

The acquisition of evidence is one of the procedures that always brings controversy in incident management. We must answer questions such as:

Article Link: https://isc.sans.edu/diary/rss/25560