GIAC
GCFE · Question #76
How can the analysis of 'prefetch files' in Windows enhance a forensic investigation?
The correct answer is B. It shows which programs were executed and can help prove program use and frequency. See the full explanation below for the reasoning.
Question
How can the analysis of 'prefetch files' in Windows enhance a forensic investigation?
Options
- AIt provides data on files downloaded from the internet.
- BIt shows which programs were executed and can help prove program use and frequency.
- CIt logs changes in user account settings.
- DIt details network logon sessions and durations.
How the community answered
(21 responses)- B81% (17)
- C14% (3)
- D5% (1)
Community Discussion
No community discussion yet for this question.