Examination

{
  "id": "MLC-T-CYB-001611",
  "term": "Examination",
  "field": "Cybersecurity",
  "definition": "1. A technical review that makes the evidence visible and suitable for analysis; as well as tests performed on the evidence to determine the presence or absence of specific data.\n\n2. A technical review that makes the evidence visible and suitable for analysis; tests performed on the evidence to determine the presence or absence of specific data.\n\n3. The second phase of the computer and network forensics process, which involves forensically processing large amounts of collected data using a combination of automated and manual methods to assess and extract data of particular interest, while preserving the integrity of the data.",
  "references": [
    "NIST SP 800-101 Rev. 1",
    "NIST SP 800-72",
    "NIST SP 800-86",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/examination/"
}