forensics
forensics Controls
5 controls across 2 frameworks.
CISA CPG
NIST CSF
rs-an-1
Investigate contributing factors to confirmed incidents
Respond / Incident Analysis
high 8h
rs-an-3
Forensics are performed
Respond / Incident Analysis
high 6h
rs-an-6
Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved
Respond / Incident Analysis
medium 3h
rs-an-7
Incident data and metadata are collected, and their integrity and provenance are preserved
Respond / Incident Analysis
medium 3h