<!-- .slide: class="content" --> ## Conclusions * Digital forensics is the best we have when preparation is insufficient! * We can do some simple and easy things to improve our forensic preparedness. * The real world equivalent: Enhance surveillance in sensitive locations to ease deterrence and detection of crime! --- <!-- .slide: class="content" --> ## Conclusions * Modern tools make it easier to prepare... * Having endpoint visibility agents installed in advance will reduce the need to resort to forensics!