Forensics article in KES

I published a new article about computer forensics in the German security journal KES (The Information Security Journal). The main focus is about the S-A-P investigation method (Secure Analyze and Present) and which tool function is really needed.
You can read more about the content on my German computer forensics blog.