Questions

1. It is important for the examiner to know the time zone in which the evidence was collected.
   1. True
   2. False
2. You can do timeline analysis with X-Way Forensics when you create a(n) ______ list.
   1. Timeline
   2. Date/time
   3. Event
   4. Party
3. Plaso is a framework for how many tools?
   1. One
   2. Three
   3. Five
   4. Seven
4. pinfo will give you what information?
   1. Information about the examiner
   2. Information about the database file
   3. Information about the forensic machine
   4. Information about the suspect
5. log2timeline is a ___________ -based tool.
   1. CLI
   2. GUI
   3. VFD
   4. XYZ
6. psort will give you the ___________.
   1. Ability to sort
   2. Ability to filter
   3. Ability to connect
   4. All of the above
7. You can...