Digital Forensics, Investigation, and Response Practice Test

Logic bombs are malicious code placed to execute when a specific condition is met, and they rely on someone with legitimate access to insert and trigger it. The most common source of this kind of threat is a disgruntled employee who already has access to critical systems and the motive to cause harm later. Interns generally have limited, temporary access, making it harder to plant a reliable trigger. External competitors typically don’t gain the kind of access needed to insert and conceal a logic bomb within internal systems. Senior executives, while they have access, are less likely to engage in this activity due to governance, risk, and the visibility of their actions.