Practice Common Forensic Artifacts To Analyze (3) - Digital Forensics and Incident Response

Practice: Common Forensic Artifacts to Analyze

Lesson 3Digital Forensics and Incident Response

Practise this section

11 questions

Flashcard drill
5 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
5 questions · about 3 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does browser history record?
Show hintHide hint
Think about what information your web browser saves.
Question 2.
What insights do registry keys provide?
Show hintHide hint
Remember, they are part of the Windows operating system.
3Question 3.
What information can be gathered from browser history?
- Account logins
- System settings
- Installed programs
Show hintHide hint
What does your browser keep track of?
4Question 4.
True or False: Prefetch files indicate which applications have been deleted.
- True
- False
Show hintHide hint
What do these files help with in context of application execution?
Question 5.
You are tasked with an investigation where the browser history shows multiple accesses to suspicious sites. Discuss how you would document and analyze these findings.
Show hintHide hint
Think about the importance of maintaining a proper chain of custody.
Question 6.
Given a situation where a registry key shows an authorized program installed but there are signs of a breach, explain the next steps you would take in the investigation.
Show hintHide hint
Consider how attackers might disguise themselves using legitimate software.

7 more questions in this section. Enroll free to practise them all.