Conducting Forensic Examinations in Zero Trust

Подробнее о видео

SANS DFIR Summit 2022

Speaker: Justin Tolman

Network and data breaches are becoming more prevalent every day. The Zero Trust framework has become the accepted framework for approaching this problem, combined with the recent security mandate from the President of the United States internal security is only going to get tighter. These security measures also impact our ability to conduct forensic investigations within our organizations. This presentation will cover some of those challenges, and present some solutions for forensic collection and review within a Zero Trust network.

View upcoming Summits:
Download the presentation slides (SANS account required) at