312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

Edgar is a member of the FBI’s forensic media and malware-analysis team. He is analyzing current malware and conducting a thorough examination of the suspect system, network, and other connected devices. Edgar’s approach is to run the malware code to determine how it interacts with the host system and what impact it has. He is also using a virtual machine and a sandbox environment.

What type of malware analysis is Edgar conducting?

A VirusTotal analysis
B Static analysis
C Malware disassembly
D Dynamic malware analysis/behavioral analysis

Explanation

Dynamic malware analysis, also called behavioral analysis, executes a sample in a controlled environment and observes its runtime behavior, including host-system interactions and effects. Sandboxes can detonate suspicious files and analyze their observed behaviors.

Learn more

Advanced technologies at the core of Microsoft Defender Antivirus

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ264

Community Discussion