GIAC
GCFE · Question #142
How does examining 'startup folder contents' help in forensic investigations?
The correct answer is A. It can reveal programs set to automatically start upon login, which might include malware or. See the full explanation below for the reasoning.
Question
How does examining 'startup folder contents' help in forensic investigations?
Options
- AIt can reveal programs set to automatically start upon login, which might include malware or
- BIt provides details on system backup schedules.
- CIt logs changes to power management settings.
- DIt tracks updates to the graphical user interface.
How the community answered
(23 responses)- A70% (16)
- B17% (4)
- C4% (1)
- D9% (2)
Community Discussion
No community discussion yet for this question.