GIAC
GCFE · Question #73
During a forensic investigation, you need to determine if unauthorized software was installed on a computer. Which event logs would be most useful to analyze to confirm this activity? (Choose three)
The correct answer is A. System log C. Security log D. Setup log. See the full explanation below for the reasoning.
Question
During a forensic investigation, you need to determine if unauthorized software was installed on a computer. Which event logs would be most useful to analyze to confirm this activity? (Choose three)
Options
- ASystem log
- BApplication log
- CSecurity log
- DSetup log
- EForwarded Events log
How the community answered
(34 responses)- A76% (26)
- B15% (5)
- E9% (3)
Community Discussion
No community discussion yet for this question.