Perform dynamic analysis to boot an “image” of a drive (without necessarily having the original drive) to see the intrusion as the user may have seen it, in a native environment.

Work roles that include this task

• CS-212 additional Cyber Defense Forensics Analyst
• EN-211 additional Forensics Analyst