A security analyst is trying to identify the source of a recent data loss incident. The analyst has reviewed all the for the time surrounding the identified all the assets on the network at the time…

A software decompiler converts compiled binaries back into readable source code but does not analyze that code for obfuscated patterns or malicious logic - it is a preparatory step, not an analysis tool.

A network enumerator discovers active hosts, open ports, and services on a network and has no capability to inspect or analyze the internal logic of an application.

Log reduction and analysis tools process event logs for patterns and anomalies, but the analyst has already reviewed the logs and suspects the key is embedded inside the application itself, not in log data.

Static code analysis examines application source code or compiled code without executing it, making it ideal for uncovering obfuscated logic, hidden strings, and disguised functions that may have facilitated data exfiltration. Unlike runtime analysis, it can reveal all code paths including those intentionally obscured by a threat actor. This directly addresses the analyst's suspicion that the source of the incident was concealed within application code.