ECCouncil Related Exams
312-49v10 Exam

A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?
An EC2 instance storing critical data of a company got infected with malware. The forensics team took the EBS volume snapshot of the affected Instance to perform further analysis and collected other data of evidentiary value. What should be their next step?
Which of the following tool creates a bit-by-bit image of an evidence media?