Five reasons why your forensics investigation will fail...

by Anton Chuvakin

Related link: http://blogs.ittoolbox.com/security/investigator/archives/004288.asp?rss=1



"Your security investigation that you're conducting right now is going to fail for a number of reasons", claims the author of this fun blog entry. What follows is an enlightening list of things that can and will go wrong during a forensics investigation. Some of them are "documentation is an afterthought","you're over your head, but can't admit it to your management" and of course "you don't care" - the mother of all reasons to fail...