Explore Cloud-Native Incident Response & Forensics

Forensics built for hard drives breaks when the "disk" is an API call and the compromised host vanished an hour ago. This topic teaches investigation of ephemeral, cloud-native infrastructure — containers, serverless functions, and the cloud control plane — and how to scope, contain, and preserve evidence when there is no physical disk to image. Explore it with a personal Socratic tutor — you steer, and Nugget follows your thread.