During an investigation, a security analyst identified machines that are infected with malware the antivirus was unable to detect. Which of the following is the BEST place to acquire evidence to perform data carving?
A. The system memory
B. The hard drive
C. Network packets
D. The Windows Registry
Answer: A. The system memory
Computer Science & Information Technology
You might also like to view...
On a social network, ________ is the measure of how frequently and deeply users interact with one another on the site
Fill in the blank(s) with correct word
Computer Science & Information Technology
A(n) ________ key that is created from naturally occurring data generated outside of a database such as a driver's license number
Fill in the blank(s) with correct word
Computer Science & Information Technology