tag:blogger.com,1999:blog-4080617372940068027.post5704128286877689666..comments2024-03-13T01:32:25.097-04:00Comments on Journey Into Incident Response: Linkz 4 AdviceCorey Harrellhttp://www.blogger.com/profile/15008629321023489214noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-4080617372940068027.post-60446876612111096872011-09-13T09:15:40.393-04:002011-09-13T09:15:40.393-04:00Harlan,
Great point and I've never seen the i...Harlan,<br /><br />Great point and I've never seen the issue discussed from this perspective. It makes me wonder about the organizations who want to develop an in-house DF capability to support their investigations. The organizations won't have a clear idea about what a DF process is let alone what their analysts should be doing. I can see how they'll rely on people they think are experts. Do you have any recommended resources for organizations to help them judge what a expert is?Corey Harrellhttps://www.blogger.com/profile/15008629321023489214noreply@blogger.comtag:blogger.com,1999:blog-4080617372940068027.post-21393989063068972632011-09-12T20:59:40.063-04:002011-09-12T20:59:40.063-04:00...organizations may not be willing to spend the t...<i>...organizations may not be willing to spend the time and resources to train a person new to the field.</i><br /><br />This can be a HUGE problem, but not because it doesn't give new people a chance. What it does mean is that an organization may hire someone and send them off on their merry way, assuming that they're an "expert". "Here's your dongles, now go have fun!" Seriously?<br /><br />If an organization hires DFIR analysts and doesn't have some idea of what they should be doing, then how do you know that what you're getting from their analysis is the real deal?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.com