GIAC
GCFE · Question #88
When performing forensic analysis on Mozilla Firefox, which file is primarily analyzed to understand user search and form history? (Choose Two)
The correct answer is A. places.sqlite C. formhistory.sqlite. See the full explanation below for the reasoning.
Question
When performing forensic analysis on Mozilla Firefox, which file is primarily analyzed to understand user search and form history? (Choose Two)
Options
- Aplaces.sqlite
- Bprefs.js
- Cformhistory.sqlite
- Ddownloads.sqlite
How the community answered
(37 responses)- A73% (27)
- B19% (7)
- D8% (3)
Community Discussion
No community discussion yet for this question.