Incident Response Forensics

Incident Response Forensics is a subfield of digital forensics that focuses on the timely acquisition, preservation, and initial analysis of volatile and non-volatile digital evidence from live or recently compromised systems during security incidents in order to support incident containment, remediation, and subsequent in-depth forensic investigation.

Publications

398

Citations

Authors

Institutions

Publications per year

2017–2026

Parents

Digital Forensics

Children

Attack ReconstructionCloud Incident ForensicsCompromise AssessmentData PreservationDisk ImagingEncrypted Data RecoveryEvent CorrelationForensic CorrelationForensic ReadinessInsider Threat Investigations

Publications

The impact of Microsoft Windows pool allocation strategies on memory forensics

Andreas Schuster · Digital Investigation · 2008 · 60 citations · Full text

Computing, Computer Science, Computer Systems +17

SP 800-86. Guide to Integrating Forensic Techniques into Incident Response

Karen Kent, Suzanne Chevalier, Timothy Grance et al. · 2006 · 48 citations

Computing, Computer Science, Information Technology +17

Applying a forensic approach to incident response, network investigation and system administration using Digital Evidence Bags

Philip Turner · Digital Investigation · 2007 · 39 citations

Computing, Cybersecurity, Information Systems +17

A Comparative UAV Forensic Analysis: Static and Live Digital Evidence Traceability Challenges

Fahad E. Salamh, Ümit Karabiyik, Marcus Rogers et al. · Drones · 2021 · 31 citations · Full text

Computing, Aerospace Engineering, Computer Science +14

A Forensic Taxonomy of SCADA Systems and Approach to Incident Response

Peter Eden, Andrew Blyth, Pete Burnap et al. · Electronic workshops in computing · 2015 · 26 citations · Full text

Computing, Computer Systems, Cybersecurity +17

1–5 of 16

Authors

SC
Suzanne Chevalier
Booz Allen Hamilton (United States), United States
3 publications · 81 citations
3
h-index
MR
Marcus Rogers
Purdue University West Lafayette, United States
2 publications · 56 citations
2
h-index
PE
Peter Eden
Jackson Laboratory, United States
2 publications · 41 citations
2
h-index
ÜK
Ümit Karabiyik
Purdue University West Lafayette, United States
2 publications · 56 citations
2
h-index
TG
Timothy Grance
National Institute of Standards, Egypt
2 publications · 67 citations
2
h-index

1–5 of 40

Institutions

1–8 of 27

Venues

Electronic workshops in computing
2 publications · 41 citations
2
h-index
Digital Investigation
2 publications · 99 citations
2
h-index
Cyber Security and Applications
1 publications · 18 citations
1
h-index
International Journal of Legal Medicine
1 publications · 17 citations
1
h-index
Figshare
Repository · 1 publications · 25 citations
1
h-index

1–5