Computer Hacking Forensic Investigator (CHFI v10) — Question 252

Which of the following tool can the investigator use to analyze the network to detect Trojan activities?

Answer options

• A. Regshot
• B. TRIPWIRE
• C. RAM Computer
• D. Capsa

Correct answer: D

Explanation

Capsa is a network analysis tool specifically designed for monitoring and detecting suspicious activities, including Trojans. Regshot and TRIPWIRE focus on file changes and integrity monitoring, which are not primarily used for network traffic analysis. RAM Computer is not a specific tool for analyzing network activities.