Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents

Published

Author(s)

Shirley M. Radack

Abstract

This bulletin explains the need for the use of digital forensic techniques, which can help organizations respond more effectively to information security incidents, and protect the confidentially, integrity and availability of their information and systems. While generally associated with law enforcement, forensic techniques also play an important role in an organization?s comprehensive information security activities. Digital forensic techniques support the investigation of crimes and violations of internal policies, analyses of security incidents, review of operational problems, and recovery from accidental system damage. Topics covered in the bulletin include the need for digital forensics, the forensics process, and the role of forensics in the system development life cycle. NIST recommendations for establishing, organizing and using forensics techniques are summarized.
Citation
ITL Bulletin -

Keywords

Digital forensic techniques, forensic tools, incident response, information security, information technology, investigations, security incidents

Citation

Radack, S. (2006), Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=50893 (Accessed March 2, 2024)
Created September 26, 2006, Updated June 24, 2021