medium
Single Answer
0

What key forensic tool used to generate reports about what happened relies on correctly set system clocks to work properly?

Answer Options

A

Disk hashing

B

Timelining

C

Forensic disk acquisition

D

File metadata analysis

Correct Answer: B

Explanation

Building a timeline, particularly from multiple systems, relies on accurately set system clocks or adding a manually configured offset. Disk hashing and acquisition does not need an accurate system clock, and file metadata can be reviewed even without an accurate clock, although accurate clock information or knowing the offset can be useful for analysis.