Skip to the main content.


The State of Digital Forensics and Incident Response 

In our interconnected world, cyber threats like data breaches
and malware attacks increasingly loom large, impacting
individuals, businesses, and governments.

What does this mean for SOC IR teams and DFIR investigations?

IDC reveals key pressures on DFIR teams 
inside this free report.



Understand the challenges facing your DFIR team.

Here’s a preview of some of the new DFIR challenges uncovered this year by IDC.

26.1 days

The average number of days needed to investigate an incident.

17.1 days

Span of days needed on average for an incident to be resolved.


Of respondents identify the skills shortage as a primary challenge.



The State of Digital Forensics and Incident Response 2023

In this IDC study, you will find insightful perspectives and valuable strategies from enterprise security professionals like you. Here are some highlights:

  • According to the research and subsequent analysis, the average time to investigate an incident is approximately 26.1 days, and the time to resolve incidents is an additional 17.1 days.

  • Prioritizing reduced "detection-to-resolution" times is critical for swift and efficient incident management.

  • The persistent skills shortage: An overwhelming 81% of respondents identify the primary challenge in incident management

Download and read the full report results, recommendations and methodology for free.