Computer Hacking Forensic Investigator (CHFI v10) — Question 89

Profiling is a forensics technique for analyzing evidence with the goal of identifying the perpetrator from their various activity. After a computer has been compromised by a hacker, which of the following would be most important in forming a profile of the incident?

Answer options

• A. The manufacturer of the system compromised
• B. The logic, formatting and elegance of the code used in the attack
• C. The nature of the attack
• D. The vulnerability exploited in the incident

Correct answer: B

Explanation

The correct answer is B because the logic, formatting, and elegance of the attack code can reveal insights into the hacker's skill level and methods. Options A, C, and D provide context about the attack but do not directly relate to the profiling aspect as strongly as the code itself does.