Description
Provide Computer Forensic Services in Computer Network Defense environment. Respond to host intrusion from hostile sources on the network. Assess hosts infected with an exploit, remove from the network;capture volatile data from active memory before removing the Host HD for forensic examination. Use Wireshark to examine network activity and capture the exploit file from the infected host for malware assessment.