In August 2008, 11 people were charged with the theft of more than 40 million credit and debit card numbers from T.J. Maxx, Marshalls, Barnes & Noble, OfficeMax, and other major retailers. Masterminded by computer hacker Albert Gonzalez, the case remains one of the largest frauds of credit card information in history. The Heartland case was similar to the TJX case. Between 2007 and 2009, the data breach involved the Heartland Payment Systems, the fifth largest credit card processor in the United States. During that time, Gonzalez and co-conspirators gained access to information associated with millions of credit cards by exploiting a network vulnerability. Both casesHeartland and TJXinvolved the theft of over 130 million credit and debit card numbers, making it the biggest computer crime case ever prosecuted in the United States. Question: you are the CISO of a Fortune 500 company here in the U.S. Your company uses customer credit card information to process millions or orders every year, both online and via traditional marketplace venues. you have information that based on recent Equifax breaches, your secure database has been breached and customer credit card data may have been stolen.

You are meeting with a Digital Forensics investigator who has been hired to access incidents and report back to you with their findings. Detail the following:

1. Needs for the DF investigation -- why did you bring in the investigator?

2. The forensic process you want followed, including data collection (detail possible sources of data), examination, analysis, and reporting.

3. List and describe the type(s) of information and it's relevance to this case from each of the following: data and data files, Operating Systems (Windows 10, WIN Server '12, and Ubuntu Linux), network traffic, applications, and eMail and services.