312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ118

Tools/Systems/Programs

Matthew has been tasked with statically analyzing a suspicious MS Office document on an Ubuntu-based forensic machine. He needs to determine the document type and whether it is encrypted or contains Flash objects/VBA macros. Which of the following Python-based scripts should he run to obtain the relevant information?

  • A oleid.py
  • B oleform.py
  • C oledir.py
  • D pdfid.py
Explanation

OleID performs initial identification and triage of Microsoft Office/OLE documents. Its indicators cover document type, encryption, embedded Flash content, and VBA-macro presence, making it suitable for this static-analysis task.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!