DFIR-01 - How Well Do You Know Intro to DFIR

This cross-platform open source forensic tool has a graphical front end called Autopsy

This source comes first in the order of volatility when conducting a forensic investigation

what is volatility?

Which of the following is a Digital Forensics Method?

During an Attack

Digital Forensics involves preserving, analyzing, and presenting digital evidence

What best describes the analysis part of digital forensics

Average time for an attack to be detected is 6 months.

Digital Forensic Principles dictates you never work on original evidence.

All the Time

After an Attack

Our software base imagers can reach and understand data as it exists here

Who uses Digital Forensics?

What can digital forensics be used to attribute evidence?

Sleuthkit/Autopsy, an open source forensic analysis tool, can also analyze Windows images.

Shows us data the way it "should" look, not how it actually is.

What procedure should be avoided in a digital forensics investigation?

Until it's actually overwritten or cleaned by garbage collection your data still lives here!

What are cybersecurity certifications that are relevant to careers in SOCs? (Check all that apply)

Jobs in the digital forensics field are expected to increase 3X to 4X in the next 5 years

A digital data extraction/analysis which removes flash memory chip(s) then extracts data using software.

Firmware can be flashed to look like it’s bigger than it is.

Only Formatting an SD card ensures that the data is expunged.