A company is running a Windows network segment with Windows 8 for its users and wants to do a statistical analysis of the workstations to help detect malware. What would be a good way to accomplish…

The correct answer is A. Use Kansa to grab and sort selected settings across the network. Kansa is a good tool that uses Powershell 3.0 or later to pull information across many hosts, and has good statistical tools built in. Powershell 3.0 or later is in Windows 8 and later already.

Incident Response & Cyber Kill Chain

Question

A company is running a Windows network segment with Windows 8 for its users and wants to do a statistical analysis of the workstations to help detect malware. What would be a good way to accomplish this?

Options

AUse Kansa to grab and sort selected settings across the network
BUtilize LINReS to pull information and compare information from machines
CGet the application proxy to give reports on the usage from individual systems
DInstall Redline on all systems and use the report function

How the community answered

(33 responses)

A
82% (27)
B
9% (3)
C
6% (2)
D
3% (1)

Explanation

Kansa is a good tool that uses Powershell 3.0 or later to pull information across many hosts, and has good statistical tools built in. Powershell 3.0 or later is in Windows 8 and later already.

Topics

#Kansa#live response#malware detection#Windows forensics

Community Discussion

No community discussion yet for this question.

Full GCIH Practice