nerdexam
EC-Council

312-49V9 · Question #519

The investigator wants to examine changes made to the system's registry by the suspect program. Which of the following tool can help the investigator?

The correct answer is C. Regshot. See the full explanation below for the reasoning.

Question

The investigator wants to examine changes made to the system's registry by the suspect program. Which of the following tool can help the investigator?

Options

  • ATRIPWIRE
  • BRAM Capturer
  • CRegshot
  • DWhat's Running

How the community answered

(41 responses)
  • A
    17% (7)
  • B
    5% (2)
  • C
    71% (29)
  • D
    7% (3)

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice