Question

As each computer is cleaned, the FBI begins an historical trace of infections, which traces the spread of the ransomware back to a computer called ITHelpDesk-01. A forensic analysis suggests the ransomware installed itself on the computer at 7:57pm, on Friday, May 5th. Keycard swipes put Dave as the only person in the vicinity at that time. On questioning Dave, he initially denies being there, but when video surveillance shows him leaving the building at 8:09pm, he admits he was there but says he was only browsing job websites. He then remembers he may have clicked on a job announcement sent to him by email, and that might have been how the ransomware was downloaded. He apologized for his stupidity, but reminded the FBI agents he hadn’t had a pay raise for six years, and none of this would have happened if the hospital had given his friend Adam the promotion he deserved, because he was the senior cybersecurity person at the hospital beforehand. Do you believe Dave? What (if any) action would you take against Dave?

Answer 1

Dave is definitely lying as ransomware mostly comes in effect just after installing it. he also lied first by saying that he was not present there