In a live acquisition, the investigator has a good idea of what the attacker did to the system during the compromise.

Name: In a live acquisition, the investigator has a good idea of what the attacker did to the system during the compromise.
Brand: Quizplus
Rating: 4.8 (33 reviews)

Question

Quizplus · Accepted Answer

In a live acquisition, the investigator may not have a complete understanding of what the attacker did to the system during the compromise, as the investigation is ongoing and the system is still running.

In a Live Acquisition, the Investigator Has a Good Idea