During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable to detect.
Which of the following is the BEST place to acquire evidence to perform data carving?
A. The system memory
B. The hard drive
C. Network packets
D. The Windows Registry
During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!