The consultant has strong knowledge of:processes for collecting, packaging, transporting, and storing electronic evidence while maintaining chain of custody.cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).cloud service models (e.g., IaaS, PaaS and SaaS) and how those models can limit digital forensics and incident response.malware analysis concepts and methodologies.adversarial tactics, techniques, and procedures.system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, SQL injection, race conditions, covert channel, replay, return-oriented attacks, malicious code).