When you are analyzing security incident, what is your ultimate goal, what answers you want to get? And why? If you want answers, what would be your questions? Proper questions are essential for getting useful output from your investigation. Asking the right one will give you a chance to get a full picture of the situation and will give a proper base for the next steps.

OK, so what we are talking about. Let’s have look at a set of questions known as 5W+H. Asking 5W+H is not cybersecurity-related. It is a set of proper questions to ask if you…