T0165

Perform dynamic analysis to boot an “image” of a drive (without necessarily having the original drive) to see the intrusion as the user may have seen it, in a native environment.

Related NICE Work Roles 1

Code Name Knowledge Skills Abilities Tasks
IN-FOR-002 [212] Cyber Defense Forensics Analyst 46 22 2 39