QuestionQ14

Host-Based Analysis

A security expert is examining a copy of the evidence: an ISO file saved in CDFS format. What type of evidence does this file represent?

Explanation

CDFS is the Windows CD-ROM file system. Microsoft documents CDFS as a read-only CD-ROM file system included with the Windows operating system, so an ISO file in CDFS format is a CD data copy prepared in Windows.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!