GIAC Certified Incident Handler (GCIH) — Question 32

The tools and techniques used in memory analysis closely resembles which other type of investigation?

Answer options

• A. Network analysis
• B. Malware analysis
• C. Live analysis
• D. Disk forensics

Correct answer: B

Explanation

The correct answer is B, as memory analysis involves examining the state of a system's memory to identify running processes and potential malware, much like malware analysis focuses on understanding malicious software. The other options, while relevant to digital forensics, do not specifically focus on the tools and techniques that are directly comparable to those used in memory analysis.