GIAC
GCFE · Question #80
What is the significance of analyzing prefetch files during forensic investigations on Windows systems?
The correct answer is B. To identify recently executed programs. See the full explanation below for the reasoning.
Question
What is the significance of analyzing prefetch files during forensic investigations on Windows systems?
Options
- ATo track network activity
- BTo identify recently executed programs
- CTo detect changes in user permissions
- DTo monitor USB device connections
How the community answered
(39 responses)- A3% (1)
- B85% (33)
- C10% (4)
- D3% (1)
Community Discussion
No community discussion yet for this question.