Cyndi, a cybersecurity researcher, has been hired to comb through historical data at a large organization after an APT was discovered. She needs to determine the extent of the attack and be able to view various parts of the network's logs to give her the full context of what occurred. Which of the following might best describe the type of analysis she is performing?
A) Packet analysis
B) Retrospective network analysis
C) Signature analysis
D) Anomaly analysis

Question

Quizplus · Accepted Answer

Retrospective network analysis is the process of examining historical data and logs to understand the scope and impact of a security incident, such as an Advanced Persistent Threat (APT), which is exactly what Cyndi is tasked with. This involves looking back over the network's logs to piece together the events that occurred.

Cyndi, a Cybersecurity Researcher, Has Been Hired to Comb Through