This assignment covers chapters 1, 2, and 3 in the Network Intrusion Analysis e-Book Question 1 As the great Sun Tzu has stated: So a military force has no constant formation, water has no constant shape: the ability to gain victory by changing and adapting according to the opponent is called Question 2 There are five base phases of an intrusion. They are: pre-intrusion actions, intrusion methods, maintaining exploitation actions. , exploitation, and post- Question 3 _reconnaissance involves "touching" some portion of your targets network. This type of activity will leave evidence of your presence and activity. Question 4 Remember to always collect the data before beginning the imaging of RAM. Question 5 The intrusion analyst must be able to adapt to the ever changing tactics used by Question 6 recon involves gathering information without "touching" the target. Question 7 toolset is simply a collection of portable executables and their dependencies. Question 8 The of a response application is of great concern and is something that should be constantly reviewed and documented. Question 9 The process for conducting an analysis is also made up of phases and that need to be taken. Question 10 Related to incident response, the ability to perform , volatile data collection, RAM imaging, analysis, hard drive imaging all while the machine remains online, has proven to be worth its weight in gold