A malicious actor recently penetrated a company's network and moved laterally to the datacenter. Upon investigation, a forensics firm wants to know what was in the memory on the compromised server. Which of the following files should be given to the forensics firm?

Question

Quizplus · Accepted Answer

A "Dump" file contains a snapshot of the system's memory at a specific point in time, which can be analyzed to understand what was in the memory on the compromised server.

A Malicious Actor Recently Penetrated a Company's Network and Moved