12.7 Authentication What types of things would a computer forensic investigator want to analyze if he selected a live analysis over a dead analysis? What methods can be used to save the contents of memory as part of a forensic investigation? Why is user education often the best protection against malware? What is the difference between local authentication and domain authentication? What are the key characteristics of a strong password? Which tool would you use to configure a computer to require complex passwords for local user accounts? What is the difference between a locked account and a disabled account? What policies can you configure on a Windows workstation to defend against a brute-force password attack? What authentication mechanisms can be used to log on to a Windows workstation