GIAC
GCFE · Question #96
An investigator is examining a Dropbox account linked to a data breach. The suspect claims they deleted all incriminating files. What cloud storage artifacts should the investigator analyze to…
The correct answer is A. Recycle bin or trash B. Sync logs C. Version history. See the full explanation below for the reasoning.
Question
An investigator is examining a Dropbox account linked to a data breach. The suspect claims they deleted all incriminating files. What cloud storage artifacts should the investigator analyze to potentially recover or track deleted files? (Choose three)
Options
- ARecycle bin or trash
- BSync logs
- CVersion history
- DNetwork logs
- EUser profile
How the community answered
(60 responses)- A75% (45)
- D7% (4)
- E18% (11)
Community Discussion
No community discussion yet for this question.