GIAC
GCFE · Question #56
What is the forensic significance of analyzing the 'Prefetch' files in Windows?
The correct answer is A. They provide insights into the programs executed on the system, helping to determine user. See the full explanation below for the reasoning.
Question
What is the forensic significance of analyzing the 'Prefetch' files in Windows?
Options
- AThey provide insights into the programs executed on the system, helping to determine user
- BThey track changes in system security settings.
- CThey log details of network configuration adjustments.
- DThey monitor the installation of new hardware.
How the community answered
(34 responses)- A71% (24)
- B18% (6)
- C6% (2)
- D6% (2)
Community Discussion
No community discussion yet for this question.