Explain why live acquisitions are especially useful when you’re dealing with active network intrusions or attacks.

Question

Question

Answer 1

Answer #1

Acquisiition is a process of accessing or copying data for examination ie, digital evidance of electronics device.

types of Acquisitions

Static Acquisition : in this Acquisition only one time data is copied or transfered and stored.

Live Acquisition: in this Acquisition data is copied from the RAM or Drive periodically for getting coreect and latest data.

live acquisitions are more usefule dealing with active network instrusion or attack ie. any one suspect that you are accessing.

May sometimes these process leave footprint only in running process on system in RAM so, the live acquisitions has to be done before taking system offline.
After doing live Acquisitions the some information is deleted or lossed from the ram and the process. it will remove some malvare information from the programm history sor it's not trackable.
becose of doing live aquisition it may change the info on the system because your action altar the RAM and runneing proceses.
The live acquitions didn't follow the traditional forensics procedure.

Answer 2

Similar Homework Help Questions

Explain the difference between passive and active attacks on a network. Give an example of each....

Explain the difference between passive and active attacks on a network. Give an example of each. Which headers are left in plaintext when we use link encryption? Network encryption? Application encryption? How is end-to-end encryption different from other types of encryption? At what layer does it take place? Describe the SSL key negotiation in terms of the keying techniques introduced in Section 14.2. Explain how the different IPsec modes apply encryption either above or below the IP layer Describe WEP2...
why are trigonometric functions useful when dealing with AC circuits?

why are trigonometric functions useful when dealing with AC circuits?
Why are trigonometric functions useful when dealing with ac circuits?

Why are trigonometric functions useful when dealing with ac circuits?

Please explain when is a Gantt Chart useful? When is a network diagram useful? How are they...

Please explain when is a Gantt Chart useful? When is a network diagram useful? How are they different? Is there any of them that is more preferable than the other?
Describe the operation of the enhanced for loop and explain why it’s especially useful with arrays....

Describe the operation of the enhanced for loop and explain why it’s especially useful with arrays. Explain when you need to implement the Comparable interface in a class you create. Describe the difference between a rectangular array and a jagged array, and explain the difference in how you create them. Describe the similarities and differences between arrays and collections. Name the two main types of collections defined by the collection framework and explain how they differ.
True or False and why ? 9. The corporate valuation model will be very useful especially...

True or False and why ? 9. The corporate valuation model will be very useful especially when a company doesn’t pay any dividends. 10. In the DCF valuation model, the present value of a stock is independent of the length of time the investor plans to hold it.

1. Explain why a policy-driven response to cyber-attacks is vital to security. 2. Explain the European...

1. Explain why a policy-driven response to cyber-attacks is vital to security. 2. Explain the European Union’s Right to Be Forgotten initiative. 3. Explain the implications of war moving from a physical battlefield to a cyber battlefield (or a combination of the two). 4. Discuss the breadth of the threat of theft due to a lack of encryption. 5. Explain the kinds of crimes that can occur when thieves are able to access unencrypted data.
Explain what a z-score is and why z-scores are useful when analyzing scores on a normal...

Explain what a z-score is and why z-scores are useful when analyzing scores on a normal curve
Asking who, what, when, where, why, and how is useful when trying to demonstrate which communicaton...

Asking who, what, when, where, why, and how is useful when trying to demonstrate which communicaton competence? 1) Effectiveness 2) Adaptability 3) Conversational involvement 4) Empathy Question 6 (2 points) Positive communication traits in U.S. contexts include all of the following EXCEPT: 1) willingness to communicate O 2 ) inititaing conversations 3) active listening 4) indirect feedback

True/false, if false explain why Rubisco Activase can catalyze removal of a sugar from Rubisco's active...

True/false, if false explain why Rubisco Activase can catalyze removal of a sugar from Rubisco's active site when Rubisco Activase's disulfide bridge is oxidized.