Adventures of a Computer CSI

We wear ourselves out giving advice and even so it always ends up happening, to you, to someone you know or to the company you work for. And when it happens, that odd bunch of people who put everything back in its place show up. One of them is Lorenzo Martínez, from Securízame, and in this video he tells me how the world looks from inside digital forensics and incident response.

Lorenzo compares it to an airline pilot or an ER doctor: they call you when you’re bleeding out and expect you to fix it. We go over million-euro ransomware, the CEO scam, tampered emails and even an insider who printed I’m watching you messages on the company’s printers. He makes two things crystal clear that I share: don’t pay the ransom, because you’re feeding an illegal industry, and that bureaucracy kills the forensic expert, because while contracts and permissions get signed the evidence is being overwritten.

There’s time for the technical side (why an iPhone is easier to analyse than an Android, free tools, the cloud) and for the human side, because mental health also weighs on you when you get cases that hit close to home. His memoirs of a computer forensic expert are almost a saga by now, and watching this you understand why.