Shane, a forensic specialist, is investigating an ongoing attack on a MySQL database server hosted on a Windows machine with SID "WIN-ABCDE12345F." Which of the following log file will help Shane in t

The correct answer is D. WIN-ABCDE12345F.log. In MySQL on Windows, the general query log file uses the hostname with a .log extension (e.g., WIN-ABCDE12345F.log). This log records every client connection, disconnection, and all SQL statements executed on the server, making it the most comprehensive source for forensic invest

Submitted by carter_n· Apr 18, 2026Computer Forensics in Today's World

Question

Shane, a forensic specialist, is investigating an ongoing attack on a MySQL database server hosted on a Windows machine with SID "WIN-ABCDE12345F." Which of the following log file will help Shane in tracking all the client connections and activities performed on the database server?

Options

AWIN-ABCDE12345F.err
BWIN-ABCDE12345F-bin.n
CWIN-ABCDE12345F.pid
DWIN-ABCDE12345F.log

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
6% (2)
D
88% (28)

Explanation

In MySQL on Windows, the general query log file uses the hostname with a .log extension (e.g., WIN-ABCDE12345F.log). This log records every client connection, disconnection, and all SQL statements executed on the server, making it the most comprehensive source for forensic investigation of database activity. The .err file is the error log (startup/shutdown errors, critical events). The -bin.n file is the binary log used for replication and point-in-time recovery. The .pid file stores the server process ID and contains no activity data.

Topics

#MySQL Forensics#Database Logs#General Query Log#Forensic Artifacts

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice