Legal Considerations in DFIR

Walkthrough summary

Legal Considerations in DFIR TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• What is the Ticket# of the reported incident?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the email of the primary person of interest (POI)?
  Open the walkthrough page to inspect the full answer and command flow.
• Who is the POI reporting to?
  Open the walkthrough page to inspect the full answer and command flow.
• What specific kind of logs was requested from IT?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the timestamp of IT's response to the request for logs?
  Open the walkthrough page to inspect the full answer and command flow.