Investigator Ian gives you a drive image to investigate. What type of analysis are you performing?

The correct answer is B. Static. When Investigator Ian gives you a drive image to investigate, the type of analysis you are performing is static analysis. Static analysis involves examining the contents of a drive, file, or binary without executing the system or the application. It's about analyzing the data…

Computer Forensics in Incident Handling

Question

Options

AReal-time
BStatic
CDynamic
DLive

How the community answered

(57 responses)

A
2% (1)
B
93% (53)
C
4% (2)
D
2% (1)

Explanation

When Investigator Ian gives you a drive image to investigate, the type of analysis you are performing is static analysis. Static analysis involves examining the contents of a drive, file, or binary without executing the system or the application. It's about analyzing the data at rest. This type of analysis is crucial for forensics investigations because it allows for the examination of files, directories, and system information without altering any state or data, thereby preserving the integrity of the evidence. Static analysis is contrasted with dynamic analysis, which involves analyzing a system in operation (real-time or live) or executing the application to observe its

Topics

#static analysis#disk image#forensic investigation#dead analysis

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice