ANTIFOR · ~14 minutes
Anti-Forensics & Super Timeline · Timestomping + Plaso
$STANDARD_INFO vs $FILE_NAME · timestomping detection · plaso/log2timeline · log tampering · carving · secure deletion traces · steganography. 18 questions, 6 Bloom levels.
How the exam works
- 18 questions · across 6 Bloom levels (Remember → Create)
- Each question has one correct answer · an explanation appears after you answer
- No time tracking · think for as long as you like
- At the end, a 6-axis radar + a program recommendation based on your weakest level
- If you choose to, you can save your result to your account and earn an achievement credential