The security operations team is conducting a mock forensics investigation. Which of the following should be the FIRST action taken after seizing a compromised workstation?
A. Activate the escalation checklist
B. Implement the incident response plan
C. Analyze the forensic image
D. Perform evidence acquisition
The security operations team is conducting a mock forensics investigation. Which of the following should be the FIRST ac
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
The security operations team is conducting a mock forensics investigation. Which of the following should be the FIRST ac
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!