CND
Cnd Incident ResponseEnglish
Exam overviewPractice session
A responder suspects a live Windows workstation is running memory-resident malware. Which action should be performed first to preserve the most volatile evidence?
Loading your practice session…