The Dearth of Documentation in DFIR Brett Shavers DFIR Training DFIR , documentation , blog 02 July 2018