DFIR practices pull together a range of data, Plurilock VP of Product and Marketing Dr. Aron Hsiao writes, which provides indirect evidence about incidents. That indirect evidence must by used by analysts to infer what has happened, and imply the event’s impact, according to Hsiao.
