GIAC
GCFE · Question #35
Why is the analysis of 'user-specific event logs' significant in a forensic investigation?
The correct answer is A. They provide a record of events triggered by specific user actions, which can help link activities to. See the full explanation below for the reasoning.
Question
Why is the analysis of 'user-specific event logs' significant in a forensic investigation?
Options
- AThey provide a record of events triggered by specific user actions, which can help link activities to
- BThey monitor the frequency of network disconnections.
- CThey log details of system firmware updates.
- DThey track changes in user interface settings.
How the community answered
(38 responses)- A79% (30)
- B11% (4)
- C3% (1)
- D8% (3)
Community Discussion
No community discussion yet for this question.