Questions
- It is important for the examiner to know the time zone in which the evidence was collected.
a) True
b) False
- You can do timeline analysis with X-Way Forensics when you create a(n) ______ list.
a) Timeline
b) Date/time
c) Event
d) Party
- Plaso is a framework for how many tools?
a) One
b) Three
c) Five
d) Seven
Pinfo
will give you what information?a) Information about the examiner
b) Information about the database file
c) Information about the forensic machine
d) Information about the suspect
- Log2timeline is a ___________ -based tool.
a) CLI
b) GUI
c) VFD
d) XYZ
psort
will give you the ___________.a) Ability to sort
b) Ability to filter
c) Ability to connect
d) All of the above
- You can do a timeline analysis with an Excel spreadsheet.
a) True
b) False