Tips to prep Windows networks for proper incident forensics

The video tutorial discusses a cybersecurity advisory from the Five Nations, emphasizing the importance of setting up proper logging and understanding systems before incidents occur. It highlights the need for forensic investigation training and the use of tools like FTK Imager and Eric Zimmerman's resources. The tutorial also covers the significance of understanding system baselines using command lines to detect anomalies and stresses the importance of addressing root causes of incidents rather than just symptoms.

What new insight or understanding did you gain from this video?