easy5 pts · first answer countsincident-responseforensicstimeline

Time zone for an incident timeline

Logs come from a firewall in Dubai (UTC+4), servers in Mumbai (UTC+5:30) and a cloud service in UTC. How should the analyst build the incident timeline?

A.Convert every timestamp to one zone, usually UTC, and note the source zoneB.Keep each log in its own local time so nothing is changedC.Use the analyst's own laptop time zone for every eventD.Drop the time and just sort events by which log file they came from

Discussion 0

Join free to post in the discussion.

Time zone for an incident timeline

Discussion 0

Related questions