EC-Council
312-49V9 · Question #519
The investigator wants to examine changes made to the system's registry by the suspect program. Which of the following tool can help the investigator?
The correct answer is C. Regshot. See the full explanation below for the reasoning.
Question
The investigator wants to examine changes made to the system's registry by the suspect program. Which of the following tool can help the investigator?
Options
- ATRIPWIRE
- BRAM Capturer
- CRegshot
- DWhat's Running
How the community answered
(41 responses)- A17% (7)
- B5% (2)
- C71% (29)
- D7% (3)
Community Discussion
No community discussion yet for this question.