The Forensics chapter provides a technical overview of digital forensic techniques and capabilities, and to put them into a broader perspective with regard to other related areas in the cybersecurity domain. The discussion on legal aspects of digital forensics is limited only to general principles and best practices, as the specifics of the application of these principles tend to vary across jurisdictions.

We speak with CyBOK Forensics author Vassil Roussev for an introductory overview of the topic.