The Role of Evidence In Cybersecurity And Forensic Analysis

A cybersecurity practitioner I know recently reached out to me for advice on a problem they had no prior experience with. They had already told the client what they believed the problem was. The client was skeptical. My friend then contacted me and gave me the sparse details, hoping I would agree with their conclusion. Instead, I sent this reply. Since it’s useful advice for anyone new to cybersecurity, I’m posting it here. Maybe it’ll be useful advice for you, too.