A forensic analysis conducted on a forensic duplicate of the system in question is referred to as:
A) Virtual analysis
B) Clone analysis
C) Post-mortem analysis
D) Ex post facto analysis

Question

Quizplus · Accepted Answer

Post-mortem analysis refers to the examination of a computer system after an event has occurred, typically using a forensic duplicate or image of the system to understand what happened without altering the original evidence.

A Forensic Analysis Conducted on a Forensic Duplicate of the System