Exam 312-49v10 topic 1 question 615 discussion

D. Static analysis Explanation: Static Analysis: This involves examining the file without executing it. The investigator analyzes the file’s code, structure, and metadata to uncover indicators of compromise (IOCs) such as suspicious code patterns, embedded malicious payloads, and other characteristics that might indicate malicious intent. Dynamic Analysis: This involves executing the file in a controlled environment to observe its behavior. This approach can potentially execute malicious code, so it's not suitable if the goal is to avoid code execution. Threat Hunting: This is a proactive approach to searching for signs of malicious activities within the network or systems. It's broader and may involve dynamic analysis among other techniques. Threat Analysis: This generally refers to assessing the threat landscape, understanding threats, and their potential impacts, which is not specific to examining a file for malicious content.