1. Improved Communication Education of Judiciary
and Law Enforcement
Collection of Volatile Data
Investigative Collaboration
Human Digestible Output
Improved Communication - COMMUNICATING THREAT INFO BETTER ACROSS COMMUNITY AND INSIDE COMPANY
Network Security is still viewed as the outdoor dog.
- Go to work early – forget to feed – smack when dog jumps up on clean cloths
Works late – come home late – smack dog again for jumping up on you - forget to feed
Awaken in the middle of the night by dog who had caught a burglar trying to break into your house
Good boy - Praise – milk and steak -
- Next morning – go to work early – forget to feed dog – smack him again when jumps up
Collection of volatile data – Working to educate the judicial system on necessary indecent response procedure must include the ability to conduct volatile data which includes imaging and analysis of memory - and that process will make changes to the computer system but
I believe LE are just beginning to come to the realization that they ARE NOT
going to be the first responders and just beginning to figure out that when they do respond, the current methodology of coming in, taking over the investigation and failing to keep the victim companies incident handling team as an integral part of the investigation is not the most efficacious method resolving the incident.
Sharing of Investigative details with the victim companies network security people can result in a better investigating and possibly uncover additional information previously not recognized as significant.