Air-Gapped Sites — Defence and Government
How to work where you cannot search, install, or take anything out.
고급 · Lessons 33 · Lab 10
Start the lab
Curriculum
Investigating Without the Internet
Transfer Bundles and Integrity
Unchangeable Configurations and Handover
Incoming Media Quarantine
A Valid Signature Is Not Enough
Showing with evidence that nothing leaves the network
De-identify the logs before they leave
Cutting accounts and permissions down to the minimum
Preparing audit evidence before the audit
Time synchronization and the evidential value of records