- What are some of the features that are available with commercial and open source forensic platforms?
A) Hex viewer
B) Email carving
C) Metadata viewer
D) All of the above
- In what registry hive could an incident responder find USBs that have been connected to the system?
A) SAM
B) Security
C) System
D) User profile
- Web history may provide data on a phishing URL that's been accessed by the system.
A) True
B) False
- Which of the following is not a Windows registry hive?
A) System
B) SAM
C) Storage
D) Software
