nerdexam
GIAC

GCFA · Question #200

Which of the following tools in Helix Windows Live is used to reveal the database password of password protected MDB files created using Microsoft Access or with Jet Database Engine?

The correct answer is D. Access Pass View. Access PassView is the Helix Windows Live tool specifically designed to recover passwords from password-protected Microsoft Access MDB database files.

Advanced Windows Artifacts & Browser Forensics

Question

Which of the following tools in Helix Windows Live is used to reveal the database password of password protected MDB files created using Microsoft Access or with Jet Database Engine?

Options

  • AAsterisk logger
  • BFAU
  • CGalleta
  • DAccess Pass View

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    13% (4)
  • D
    78% (25)

Why each option

Access PassView is the Helix Windows Live tool specifically designed to recover passwords from password-protected Microsoft Access MDB database files.

AAsterisk logger

Asterisk Logger is used to reveal passwords that are masked by asterisk characters in GUI dialog boxes and input fields, not for decrypting database file passwords.

BFAU

FAU (File Access Utility) is a forensic tool used for analyzing file access timestamps and metadata, not for password recovery from database files.

CGalleta

Galleta is a forensic tool for parsing and extracting data from Internet Explorer cookie files, unrelated to Access database password recovery.

DAccess Pass ViewCorrect

Access PassView (developed by NirSoft and included in Helix Windows Live) is a forensic utility that decrypts and displays the database password stored in MDB files created by Microsoft Access or applications using the Jet Database Engine. It targets the specific weak encryption scheme used by Access to protect database files, making it the correct tool for this exact scenario.

Concept tested: Helix Windows Live forensic tool for Access MDB passwords

Source: https://www.nirsoft.net/utils/accesspv.html

Topics

#Helix toolkit#forensic tools#password recovery#MDB files

Community Discussion

No community discussion yet for this question.

Full GCFA Practice