Question: Why the Windows prefetch database might be interesting for a forensic investigator? a . Because it contains additional filesystems mounted at boot time b .
Why the Windows prefetch database might be interesting for a forensic investigator?
a Because it contains additional filesystems mounted at boot time
b Because it contains shortcuts to applications to be started when the user logs in
c Because it contains information about applications commonly used and preloaded in the system memory for faster access
d Because it contains system libraries preloaded in the memory for faster access by system executables
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
