An Incident Responder Successfully Acquired Application Binaries Off a Mobile

Multiple Choice

An incident responder successfully acquired application binaries off a mobile device for later forensic analysis. Which of the following should the analyst do NEXT?

A) Decompile each binary to derive the source code.
B) Perform a factory reset on the affected mobile device.
C) Compute SHA-256 hashes for each binary.
D) Encrypt the binaries using an authenticated AES-256 mode of operation.
E) Inspect the permissions manifests within each application.