Cap 5 English

It is important for the examiner to know the time zone in which the evidence was collected.

• True

• False

You can do timeline analysis with X-Way Forensics when you create a(n) ______ list.

• Timeline

• Date/time

• Event

• Party

Plaso is a framework for how many tools?

• One

• Three

• Five

• Seven

Pinfo will give you what information?

• Information about the examiner

• Information about the database file

• Information about the forensic machine

• Information about the suspect

Log2timeline is a ___________ -based tool.

• CLI

• GUI

• VFD

• XYZ

psort will give you the ___________.

• Ability to sort

• Ability to filter

• Ability to connect

• All of the above

You can do a timeline analysis with an Excel spreadsheet.

• True

• False

Which of the following is a key feature of timeline analysis in digital forensics?

• Identifying the suspect

• Determining the sequence of events

• Recovering deleted files

• Encrypting data

In digital forensics, what is the primary purpose of using a tool like Plaso?

• To create a backup of data

• To analyze network traffic

• To extract and analyze event data

• To perform hardware diagnostics

Which of the following is NOT typically a component of a digital forensic timeline?

• File creation dates

• User login times

• Network bandwidth usage

• Application installation dates