
Relevant artifacts for a forensic analysis This enables a timely initial assessment of the security incident. Translated from English, it also means selection, and this is exactly what is done in a “triage collection.” Only the most important artifacts are saved for a forensic examination in order to save resources and to be able to start the analysis quickly. In terms of digital forensics, this term takes on a different meaning. The purpose of classification is to ensure that, given limited resources, care can be provided with minimal harm to each individual patient. The term “triage” originally comes from the medical field and describes a situation in which, due to limited resources, a classification of patients is performed. Relevant artifacts for a forensic analysis.
