企業調査の一環として、フォレンジック調査員のメリッサは、容疑者のノートパソコンのウェブブラウザの履歴、Cookie、キャッシュを調査するよう依頼されました。ノートパソコンには、Google Chrome、Firefox、Safariなど、複数のウェブブラウザがインストールされています。メリッサは、複数のウェブブラウザからこれらのデジタルアーティファクトを包括的に抽出・分析できるツールを必要としています。彼女はどのツールを使用すべきでしょうか?
正解:A
Option A. NetAnalysis is the best answer because the question is specifically about extracting and analyzing browser history, cookies, and cache across multiple web browsers . CHFI v11 explicitly includes Tools to Examine the Cache, Cookie, and History Recorded in Web Browsers and Private Browsing and Browser Artifact Recovery under its tool-based operating-system and artifact analysis objectives.
A dedicated browser-artifact tool is the most appropriate choice when the focus is on cross-browser internet activity reconstruction. NetAnalysis is designed for that kind of work and is far more targeted than the other options for analyzing Chrome, Firefox, Safari, and similar browser traces in one workflow.
Sleuth Kit is excellent for file system analysis, but it is not the most direct answer for comprehensive browser- artifact examination. EnCase is a broad forensic suite, but the question asks for the tool best suited specifically for browser history, cookies, and cache. DiskExplorer is not the strongest fit for this requirement.
Therefore, based on CHFI's browser-artifact tool objectives, NetAnalysis is the most precise and appropriate answer.