Explore / Skills

Preserving incident evidence and timeline

Secures logs, copies and system state with integrity checks, records chain of custody and a timestamped account of what was known when, so the evidence supports later review, notification or legal use.