Modernization of incident response capabilities has become a critical focus of enterprise security with on-going shifts-right in the protection landscape. Digital forensic investigation support is shown to be an essential component of incident response and guidance is offered on how to optimize the interaction, especially as commercial platforms and tools are selected by CISO-led teams.