CSIA310 Lab Activity #3: Investigate System Backup and Restore Tools

Lab Activity #3: Investigate System Backup and Restore Tools
Purpose: Assess and Document Tools to Backup and Restore the System Hard Drive for a Windows 8.1 Workstation.
1. Assess and document the use of a system backup tool or disk imaging utility to create a “known-good” copy of the system hard drive for a Windows 8.1 Workstation.
2. Assess and document the use of “known-good” copies of system hard drives to restore system availability after an incident.
Overview:
For this activity, we will focus upon assessing and documenting tools which are used in the preparation phase and in the containment, eradication, and recovery phase of the Incident Response Process (as defined in NIST SP 800-61r2). These tools will support incident responders by providing “access to images of clean OS and application installations for restoration and recovery purposes" (Cichonski, Millar, Grance, & Scarfone, 2012, p. 23). 
Situation Report:
Recent contracts with the Departments of Defense and Homeland Sec