Conceptos y retos en la atención de incidentes de seguridad y la evidencia digital

Abstract

The continuous reports of security vulnerabilities and new ways to have acces to privileged resources of our host, notice the necessity to be prepared to face a possible attack in our computational infrastructures and communications. therefore, the organizations that would maintain high security levels, require to establish, along with the good computer security practices, computer incidet response teams, strategiees for the identificaction and harvesting of the evidence of the incident, as well as personal permanently trained in computer security. I this sense, this article offers to readers an analysis scenario to think about incident repsonse and digital evidence