GIAC
GCFE · Question #34
Which two artifacts are essential for identifying user interactions with specific files in Windows?
The correct answer is A. NTUSER.DAT B. Prefetch files. See the full explanation below for the reasoning.
Question
Which two artifacts are essential for identifying user interactions with specific files in Windows?
Options
- ANTUSER.DAT
- BPrefetch files
- CRegistry logs
- DSystem restore points
How the community answered
(30 responses)- A83% (25)
- C7% (2)
- D10% (3)
Community Discussion
No community discussion yet for this question.