medium
Single Answer
0What key forensic tool used to generate reports about what happened relies on correctly set system clocks to work properly?
Answer Options
A
Disk hashing
B
Timelining
C
Forensic disk acquisition
D
File metadata analysis
Correct Answer: B
Explanation
Building a timeline, particularly from multiple systems, relies on accurately set system clocks or adding a manually configured offset. Disk hashing and acquisition does not need an accurate system clock, and file metadata can be reviewed even without an accurate clock, although accurate clock information or knowing the offset can be useful for analysis.