Overview: Digital Forensics and Incident Response (DFIR)

Quick Definition

Digital Forensics and Incident Response is a specialized cybersecurity function delivered by computer emergency response or computer security incident response teams. In instances where these teams are called in, they are looking for forensic evidence of criminal or unauthorized activity, reconstructing the actions that took place.