Investigation covers the forensic analysis of cyber incidents, helping determine how attacks occurred, what was affected, and which evidence supports response.
Search across headline titles and summaries.
Background for this topic.
Investigation is the systematic examination of an event, claim, or suspected activity to establish what happened, when it happened, and who or what was involved. In information security, it commonly covers suspected intrusions, misuse of accounts, data exposure, fraud, and control failures. Investigators reconstruct an event from sources such as authentication records, endpoint artifacts, network telemetry, cloud logs, and disk or memory images, then determine the affected systems, data, and attack path.
Reliable investigations depend on preserving evidence without altering it, recording its provenance, and separating confirmed facts from assumptions. Findings can guide containment and recovery, reveal vulnerabilities that require remediation, and provide threat intelligence about tools or techniques used against an organization. Privacy and legal requirements may restrict what data can be collected or shared, while weak logging, short retention, or uncontrolled access can leave important questions unanswered and undermine any disciplinary, regulatory, or judicial action.
Weekly headline count for the current query.
The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”
Sophisticated Python malware uncovered in fraud probe shows obfuscation, disposable infrastructure
Cellebrite data confirms digital evidence is now central to almost all cases
UK Data Protection Watchdog has “serious concerns” over data privacy on Elon Musk’s social platform
The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector
The initial investigation shows early signs of links with the FIN11 and Clop cyber extortion groups
Senator Ron Wyden of Oregon has urged the FTC to investigate Microsoft for cybersecurity lapses linked to ransomware attacks on US critical infrastructure
An investigation has revealed that files were stolen in a data breach affecting a South Carolina school district
Nevada’s CIO confirmed in a press conference that ransomware actors had exfiltrated data from state networks, amid an ongoing incident investigation
In a new investigation launched at DEFCON 33, Analyst1’s Jon DiMaggio revealed probable Russian government involvement in the Kaseya attack
An investigation has revealed novel scams using tools like MaisonReceipts, creating realistic fake receipts to resell stolen or counterfeit good
The CERT-UA investigation concluded that the attack’s techniques were “characteristic of Russian intelligence services”
ISACA London Chapter members demand e-voting system investigation over security and privacy concerns
The Information Commissioner’s Office is now investigating how TikTok uses 13–17-year-olds’ personal information
HPE is investigating claims of data breach by hacker IntelBroker, who offered stolen files for sale
Telco giant AT&T will pay the FCC $13m to resolve a cloud breach investigation
The Federal Bureau of Investigation's Internet Crime Complaint Center (IC3) reported a 45% increase in cryptocurrency-related scams in 2023
Australia’s data protection watchdog has decided to stop its investigation into US facial recognition company Clearview AI
Two Congressmen fear that the Chinese government might use TP-Link Wi-Fi routers to deploy hacking and espionage campaigns in the US
After months of investigation, the SEC decided not to recommend any enforcement action against software provider Progress regarding the supply chain attack