Paul Bottomley, Director of Product for / Forensic Acquisition & Investigation, explains how the product addresses one of the hardest challenges for DFIR teams - container investigations. We show how the product supports the acquisition and processing of containers from ECS, EKS, AKS and GKE so that ephemeral workloads can be preserved before the disappear forever.