312-49V11: Computer Hacking Forensic InvestigatorDemo

By ECCouncil · Question Mode

QuestionQ228

Procedures and Methodology

An investigator is inspecting a file to identify potentially malicious content. To prevent code execution while still uncovering hidden indicators of compromise (IOC), which type of examination should the investigator perform?

  • A Dynamic analysis
  • B Threat hunting
  • C Threat analysis
  • D Static analysis
Explanation

Static analysis inspects a file without running it, enabling examination of artifacts such as metadata, hashes, strings, and embedded content for indicators of compromise.

Community Discussion

No comments yet. Be the first to start the discussion!