1 in 3
DFIR experts agree
major improvements or a complete overhaul are needed for acquisition and analysis of digital evidence.
CHANGE IS NEEDED
A complete overhaul for acquisition and analysis of digital evidence is a must.
This is understandable given that many labs have legacy DFIR tools in place that aren’t designed to meet the needs of today’s challenges. “Major improvements” or “complete overhaul” is a significant complaint about the current state of these organizations’ capabilities.
Learn What Your Business Needs to Stay Prepared
Hear from your DFIR peers about how they are preparing for change.
MOST FREQUENT SECURITY THREATS
Endpoints infected with malware and ransomware were 40% of all investigation types in the last year.
Overall, ransomware is the biggest challenge facing practitioners today, and will continue to be a main concern for the next two years.
Main Reasons That Digital Forensics Investigations Are Outsourced to External Third Parties
Impartial third-party review required
Excessive volume of investigations
Don't have the required toolset to investigate
TOP CONCERNS FOR PRACTITIONERS
Automation is needed to minimize repetitive tasks and downtime so examiners can focus on high-value tasks.
Armed with this knowledge, decision-makers can ensure that they are budgeting accordingly to support their teams and set them up for success now, and in the future. Practitioners are the ones doing those tasks so of course they are more challenging for them, and practitioners assume this will continue to plague them over the next few years.
2022 State of Enterprise DFIR
Fill out the form to access insights and learnings from your DFIR peers.