How do you know if your DFIR case will be an amazing case or a case from hell? The worst way to find out is when you check the news and see your name and case blasted everywhere online.
The answer: You won’t know until it is too late.
When you are working a case (or incident), some of the first things that go through your mind are:
**Is this case important?
**Will this case substantially impact my job, career, or organization (negative or positive impact)?
**Will this case become publicly scrutinized?
**Will this case be picked apart at a trial?
Well! Here is the flow chart with the answer before you start the case.
Of course, there are many factors to consider for every case, but one of the most frustrating factors is not knowing if the case will be a great (positively important to the organization or public)