Investigation Capability
Incident Response
Forensic support for live cyber incidents.
Overview
Rapidly collect and analyze digital artifacts during active cyber attacks to identify threat actor TTPs (Tactics, Techniques, and Procedures).
Investigation Methodologies
Live Triage
Malware Reversing
IoC Extraction
Lateral Movement Tracking
