SOC
การวิเคราะห์นิติวิทยาศาสตร์
The scientific examination and investigation of digital devices, logs, or data to identify, collect, preserve, and analyze evidence related to security incidents, enabling root-cause determination and supporting legal or disciplinary action, as described in NIST SP 800-86 and ISO/IEC 27037.
Quick answer: The scientific examination and investigation of digital devices, logs, or data to identify, collect, preserve, and analyze evidence related to security incidents, enabling root-cause determination and supporting legal or disciplinary action, as described in NIST SP 800-86 and ISO/IEC 27037.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Quick answer
The scientific examination and investigation of digital devices, logs, or data to identify, collect, preserve, and analyze evidence related to security incidents, enabling root-cause determination and supporting legal or disciplinary action, as described in NIST SP 800-86 and ISO/IEC 27037.
Why it matters
การวิเคราะห์นิติวิทยาศาสตร์ matters because it supports clear communication in SOC contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Editorial context
This page is rendered as static HTML from source-backed terminology data so search engines and AI systems can parse the content without client-side code.
Definition
The scientific examination and investigation of digital devices, logs, or data to identify, collect, preserve, and analyze evidence related to security incidents, enabling root-cause determination and supporting legal or disciplinary action, as described in NIST SP 800-86 and ISO/IEC 27037.
Operational example
Forensic analysis of compromised endpoints revealed the attack vector, the persistence mechanism, and the data exfiltrated by the adversary.
Localized term
การวิเคราะห์นิติวิทยาศาสตร์
Localized example
การวิเคราะห์นิติวิทยาศาสตร์ของอุปกรณ์ที่ถูกโจมตีเผยให้เห็นช่องทางการโจมตี กลไกความคงอยู่ และข้อมูลที่ถูกขโมยโดยผู้โจมตี
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
