EC-Council
312-49V11 · Question #170
A CHFI has been asked to recover browser history from a seized Microsoft Edge browser on a Windows system. This is important to pinpoint the suspect's online activities. The suspect was known to…
Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #170. The question stem and answer options stay visible for context.
Windows Forensics
Question
A CHFI has been asked to recover browser history from a seized Microsoft Edge browser on a Windows system. This is important to pinpoint the suspect's online activities. The suspect was known to clear their browser history frequently. Which tool and path would most efficiently recover the required data?
Options
- AMZCacheView tool; Path:
- BMZHistoryView tool; Path:
- CBrowsing HistoryView tool; Path: C:\Users\Admin\AppData\Local\Microsoft\Windows\History
- DBrowsing HistoryView tool; Path: C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache
Unlock 312-49V11 to see the answer
You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Microsoft Edge forensics#browser history recovery#WebCache#BrowsingHistoryView