Which of the following is NOT an anti-analysis technique?

• A. Metadata scrubbing
• B. Encryption
• C. Secure file deletion
• D. Authentication tokens

Answer: (D)

Anti-analysis techniques are methods used to hinder investigators by concealing or erasing forensic evidence. Metadata scrubbing removes information about a file’s origin, creation times, and authorship that could point to who or what created it. Encryption protects the content so that, without the key, analysis of the data is effectively blocked. Secure file deletion aims to ensure leftover data cannot be recovered, making post-event reconstruction much harder.

Authentication tokens, on the other hand, are used to prove identity and manage access to systems or resources. They’re about verifying who you are and allowing actions, not about hiding data, altering traces, or destroying evidence. Since they don’t inherently impede forensic analysis or conceal artifacts, they’re not considered an anti-analysis technique.