Forensic Collection Prompt
Prompt
Conduct forensic data collection from compromised systems: preserve evidence, maintain chain of custody.
Why it works
Proper evidence collection enables forensic analysis and supports legal action. Chain of custody is essential.
Watch out for
Improper evidence handling corrupts evidence and makes it inadmissible. Forensic tools introduce artifacts.
Used by
IT & Ops Teams