Where to draw the line on AI: Lessons from digital forensics

Artificial intelligence is becoming part of almost every workflow. Developers are using it to write and test code, customer support is turning to it to handle routine queries, and security teams are using it to analyze alerts and support investigations. Digital forensics and incident response (DFIR) is no exception.

DFIR Curriculum Lead and Head of Faculty at SANS Institute.

But as digital forensics work has evolved over the last few decades, one lesson remains consistent. Tools can support investigations, but…