Which analysis method examines malware without executing it?

### Why this is right Static analysis examines malware without running it. This can range from checking file characteristics to examining its instructions with a disassembler. ### The concept Dynamic analysis executes malware and observes its effects. Static analysis avoids execution, which can reduce immediate risk, but basic static checks may miss behaviour that is hidden or only triggered under particular conditions. ### The other options - **B. Basic dynamic analysis**: It runs the malware and observes its behaviour, so it is not static. - **C. Debugger-based dynamic analysis**: It examines a running program's internal state and therefore requires execution. - **D. Live incident response**: This is a broad response activity, not the analysis method defined by inspecting without execution. ### Terms - **Static analysis**: Examination of a program without running it. - **Dynamic analysis**: Examination of a program by running it and monitoring its behaviour. - **Disassembler**: A tool that displays a program's machine instructions in a form analysts can inspect. ### Remember If the sample is not run, the method is static analysis.