Defensive Cyber Operations (DCO) - Forensics and Malware Analysis (PEO EIS)
Abstract
DCO Forensics and Malware Analysis (F&MA) capability is a software/hardware based solution enabling global, regional, and local cyberspace defenders to perform forensics either remotely or locally. Forensics is evidence related and Malware capabilities provides a sandboxlike, virtual environment that allows for the conduct of real-time, automated and dynamic malware decomposition and behavior analysis. Forensics gives cyberspace defenders the ability to collect, process, search, and analyze evidence from portable electronic devices, removable media, system hard drives, and random access memory. This process rapidly triages an incident and place the impacted system(s) back in service.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2023
- Source ID
- f191c7608c86979cee9768fdd70212a4