Digital › Module 7 › Lesson 5
Quiz — Timeline
APPLY: timeline named, correlation, hypotheses; UTC discipline on $DFIR_LAB.
Opening
Timeline and correlation judgment.
Build UTC timelines and testable hypotheses — refuse fabrication and unauthorized evidence.
Knowledge Check
Timeline rows use:
Multiple choice
Knowledge Check
True or False: Backdating events is acceptable lab.
True or False
Knowledge Check
Correlation join keys include:
Multiple choice
Knowledge Check
Weak correlation should:
Multiple choice
Knowledge Check
True or False: Delete rows that contradict theory.
True or False
Knowledge Check
Hypothesis row includes:
Multiple choice
Knowledge Check
Observed vs inferred:
Multiple choice
Knowledge Check
True or False: Single IP proves nation-state.
True or False
Knowledge Check
Timeline gaps:
Multiple choice
Knowledge Check
Next:
Multiple choice
Answer all 10 knowledge checks to continue. (0/10 answered)