Compass Incident Handling and Forensics Number Crunching

The anonymous data on our cases allows us to answer the question "What is a typical DFIR case at Compass Security?" and we conclude its the analysis, containment, eradication and recovery of one or a few devices in a Windows domain which is probably no surprise :)

analysis anonymous breach case cases cloud compass containment data devices dfir domain forensic forensics handling incident incident response question recovery security statistic surprise what is windows