Citation[]
NIST Special Publication 800-86: Guide to Integrating Forensic Techniques into Incident Response (Aug. 2006) (full-text).
Overview[]
This guide provides detailed information on establishing a forensic capability, including the development of policies and procedures. Its focus is primarily on using forensic techniques to assist with computer security incident response, but much of the material is also applicable to other situations.