QUESTION $4$

What is not part of the network connections methodology?

a$.$ Process name

b$.$ Parent process ID

c$.$ Check for signs of a rootkit

d$.$ Associated entities

QUESTION $5$

Which of the following is a command$-$line tool available on Linux and Windows that can be used for memory analysis of Windows memory

a$.$ Volatility

b$.$ Strings

c$.$ Redline

d$.$ EnCase

QUESTION $6$

Dumping files associated with a process will never introduce malware to a responder's system.

True

False

Click Save and Submit to save and submit. Click Save All Answers to swe all answers.