While examining multiple compromised systems, an investigator lists a priority for each machine based on executive input and the type of service and data each machine provides the organization. Which investigative technique does this describe?
While examining multiple compromised systems, an investigator lists a priority for each machine based on executive input and the type of service and data each machine provides the organization. Which investigative technique does this describe?
The process of prioritizing compromised systems based on their importance to the organization and the type of data and services they provide is referred to as 'triaging.' Triaging helps an investigator determine which systems to address first according to the severity of the compromise and their importance to the overall operation of the organization.
The investigative technique described in the scenario is D. Triaging.