How Security Teams Use Digital Forensics and Incident Response

Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense · Jul 10, 2026 · 9m · transcript

Lucas and Luna drill into the practice of digital forensics and incident response — DFIR — as it's practiced in mid-2026. They walk through a real incident timeline: a healthcare company's ransomware attack detected on a Tuesday afternoon, the initial containment, evidence preservation, root-cause analysis, and the choice between paying the ransom and restoring from backups. They discuss why DFIR teams now use memory forensics and log aggregation tools like Velociraptor and Timesketch, how the average mean time to detect has dropped from 207 days in 2023 to around 68 days according…