Incident response First-responder

Preliminary forensic examination are over-taxed and the influx of cases leads to backlogs. Yet timely action may be important to hold criminals account-able for their actions or to protect others from further harm. 02; Palmer, 2001; Clark, 2005), but lengthy process is st models is tech-trained specialists noted. In reaction, ncept of triage has degrees of impor-tance and urgency to items (Rogers et al., 2006; Casey et al., 2009).With respect to digital forensics, triage typically refers to rapid analysis, possibly on-scene, of digital evidence, with steps to maintain the integrity of the evidence. Since the evidence is preserved, triage does not obviate later, extended analysis using a forensic model. Digital forensic triage can provide investigative leads in a timely manner so that they can be acted upon while still applicable