For this week’s discussion your focus will be upon developin

For this week’s discussion your focus will be upon developing a brief (1-2page) forensics data collection plan to be used during a Red Team exercise.Your plan will be used as part of training exercise for incident responsepersonnel to help them learn to identify and collect evidence.Your first task is to analyze the Red Team’s report (attached below) todetermine what they attacked or what attack vectors were used. Next, analyzethe environment to determine what types of forensic evidence should becollected after the attack(s) and where that evidence can be collected from.You should consider both volatile sources such as RAM (memory) and staticsources such as disk drives, thumb drives (USB storage devices), etc. After youhave identified the types of evidence and the devices from which evidenceshould be collected, document that in your short paper (the ‘plan’).At a minimum your plan must document evidence collection for three specificattack vectors or vulnerabilities that were exploited by the Red Team as partof its penetration testing. For each vector or vulnerability, document whattype of evidence could be collected and where the evidence should be collectedfrom.