I’m in the security side of the IT. One of my resposabilities is discover the authors of an attack and their intention from outside and inside my networks. Of course, one of the more populated tools for this, is the forensic tools and procedures. But when i was need make investigation about an attack, normally i got a good results only with saw the logs from the servers, pc and IDS.
Really somebody from the real world had an efective good experience with the forensic activities?.
For other side, somebody used Steganalysis for security reason?.
