Скачать или смотреть Strengthening Your Forensic and Response Mindset

Think Like an Examiner: Strengthening Your Forensic and Response Mindset

🎙️ Tony Knutson, Principal Consultant, Palo Alto Unit 42
📍 Presented at SANS DFIR Summit 2025

Cybersecurity professionals are often faced with complex, high-stakes investigations where quick decision-making and investigative accuracy are critical.

However, many practitioners struggle to balance the rapid response required in Incident Response (IR) with the deep analytical mindset needed for Digital Forensics (DF). Without a structured investigative approach, security teams risk missing key evidence, drawing premature conclusions, or failing to remediate threats effectively.

This presentation, “Think Like an Examiner: Strengthening Your Forensic & Response Mindset,” explores how cybersecurity professionals can develop a structured, examiner-focused approach that enhances both forensic accuracy and incident response agility. By shifting from a reactive mindset to an investigative mindset, examiners can improve their ability to analyze threats, preserve critical evidence, and make confident decisions in high-pressure environments.

View upcoming Summits: https://www.sans.org/u/DuS