A growing role within a blue team that does not get as much awareness as it should is around e$-$discovery. Often times, a member of your blue team will specialize in e$-$discovery collections and will partner with the legal team to ensure evidence is handled appropriately.

students should:

Provide an initial reaction. Is e$-$discovery something you've experienced before?

What sources would you typically look at for e$-$discovery?

Does this area of blue team interest you? Why or why not?