Which of the following data structures stores attributes of a process, as well as pointers to other attributes and data structures?
While searching through a computer under investigation, you discover numerous files that appear to have had the first letter of the file name replaced by the hex code byte 5h. What does this indicate on the computer?
What type of analysis helps to identify the time and sequence of events in an investigation?
Which of the following is a list of recently used programs or opened files?
TESTED 21 Nov 2024
