Task ID: T0165
Task Description: Perform dynamic analysis to boot an "image" of a drive (without necessarily having the original drive) to see the intrusion as the user may have seen it, in a native environment.
Work Roles with this Task:
- Work Role ID: IN-FOR-001Work Role Name: Law Enforcement/Counterintelligence Forensics AnalystWork Role Description: Conducts detailed investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.Category: InvestigateSpecialty Area(s): Digital Forensics
- Work Role ID: IN-FOR-002Work Role Name: Cyber Defense Forensics AnalystWork Role Description: Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.Category: InvestigateSpecialty Area(s): Digital Forensics