Question: Isaac is performing a forensic analysis on two systems that were compromised in the same event in the same facility. As he performs his analysis,
Isaac is performing a forensic analysis on two systems that were compromised in the same event in the same facility. As he performs his analysis, he notices that the event appears to have happened almost exactly one hour earlier on one system than the other. What is the most likely issue he has encountered?
The attacker took an hour to get to the second system.
One system is set to an incorrect time zone.
The attacker changed the system clock to throw off forensic practitioners.
The forensic tool is reading the timestamps incorrectly.
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
