GIAC
GCFE · Question #105
What forensic value do Windows registry hives offer in the context of system analysis?
The correct answer is B. They store metadata about installed software and user activity. See the full explanation below for the reasoning.
Question
What forensic value do Windows registry hives offer in the context of system analysis?
Options
- AThey contain log files of system errors
- BThey store metadata about installed software and user activity
- CThey record network traffic logs
- DThey provide encryption keys used for file protection
How the community answered
(50 responses)- A8% (4)
- B76% (38)
- C4% (2)
- D12% (6)
Community Discussion
No community discussion yet for this question.