GIAC
GREM · Question #159
Which Windows event is MOST useful for mapping malware persistence?
The correct answer is B. Autorun execution. See the full explanation below for the reasoning.
Question
Which Windows event is MOST useful for mapping malware persistence?
Options
- APrefetch
- BAutorun execution
- CLSASS dump
- DNetwork profile change
How the community answered
(36 responses)- A3% (1)
- B81% (29)
- C6% (2)
- D11% (4)
Community Discussion
No community discussion yet for this question.