GCED: GIAC Certified Enterprise DefenderDemo

By GIAC · Question Mode

QuestionQ22

Digital Forensics Concepts and Application

Creating a filesystem timeline is associated with which objective?

  • A Forensic analysis
  • B First response
  • C Access control
  • D Incident eradication
Explanation

A filesystem timeline organizes file metadata timestamps to reconstruct and correlate events during an investigation, making it a forensic-analysis technique.

Community Discussion

No comments yet. Be the first to start the discussion!