Forensically Sound Cold System Analysis

As opposed to live system analysis, experts performing the cold analysis are not dealing with authenticated user sessions. Instead, cold analysis can be viewed as an intermediary measure with live system analysis on the one end and the examination of a forensic disk image on another. Why and when would you use cold system analysis, what can you do and what benefits does it bring compared to the traditional approach? Read along to find out.

👉 https://blog.elcomsoft.com/2020/12/forensically-sound-cold-system-analysis/

#dfir #datasecurity #encryption #windows #itsecurity