Which type of media should the IR team be handling as they seek to understand...

GIAC GCED Question Answer

Which type of media should the IR team be handling as they seek to understand the root cause of an incident?

Restored media from full backup of the infected host

Media from the infected host, copied to the dedicated IR host

Original media from the infected host

Bit-for-bit image from the infected host

GCED PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"