Episode 185: When to Stop Looking for Evidence - Part 1
▶Episode 185: When to Stop Looking for Evidence - Part 1 — a SANS Digital Forensics and Incident Response security conference talk on dfir (3:01 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube