T0165
Perform dynamic analysis to boot an “image” of a drive (without necessarily having the original drive) to see the intrusion as the user may have seen it, in a native environment.
Related NICE Work Roles 1
| Code | Name | Knowledge | Skills | Abilities | Tasks |
|---|---|---|---|---|---|
| IN-FOR-002 [212] | Cyber Defense Forensics Analyst | 46 | 22 | 2 | 39 |