A security analyst has created an image of a drive from an incident. Which of the following describes what the analyst should do NEXT?
A. The analyst should create a backup of the drive and then hash the drive.
B. The analyst should begin analyzing the image and begin to report findings.
C. The analyst should create a hash of the image and compare it to the original drive's hash.
D. The analyst should create a chain of custody document and notify stakeholders.
A security analyst has created an image of a drive from an incident. Which of the following describes what the analyst s
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A security analyst has created an image of a drive from an incident. Which of the following describes what the analyst s
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!