Question: Why the Windows prefetch database might be interesting for a forensic investigator? a . Because it contains additional filesystems mounted at boot time b .

Why the Windows prefetch database might be interesting for a forensic investigator?
a. Because it contains additional filesystems mounted at boot time
b. Because it contains shortcuts to applications to be started when the user logs in
c. Because it contains information about applications commonly used and pre-loaded in the system memory for faster access
d. Because it contains system libraries pre-loaded in the memory for faster access by system executables
 Why the Windows prefetch database might be interesting for a forensic

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!