1. Collision of events… 2. Typical Network Incident Response Technicians must choose: Expend effort collecting forensically sound data, or Simply restore network as quickly…