The volume of content available in some investigations can be overwhelming to the point that investigations are slowed and the size of the backlog increases.
This presentation seeks to speed the investigative process through the use of statistical sampling method which can be applied to evidence collections and use the results to rank or prioritize evidence for review.
If you'd like to learn more about VerSprite's DFIR services, please visit our site at https://versprite.com/security-offerings/dfir/.