top of page
-
Purpose: Incident investigation is to identify and understand security incidents that occur in a system or organization and to take appropriate measures to resolve the issue, restore system functionality, and prevent similar incidents in the future.
-
Details: Incident investigation typically involves collecting and analyzing data and evidence about the incident, such as log files, network traffic data, etc. Investigators will analyze this information in an attempt to determine the intruder's point of entry, movements, and extent of damage. The results will be used to patch system vulnerabilities, improve security policies, and more.
-
Services: Accident investigation and analysis/Assist in system recovery/Provide accident analysis report, including improvement and defense reinforcement operations.
bottom of page