List of questions
Related questions
Question 56 - ECSS discussion
James, a forensic specialist, was appointed to investigate an incident in an organization. As part of the investigation, James is attempting to identify whether any external storage devices are connected to the internal systems. For this purpose, he employed a utility to capture the list of all devices connected to the local machine and removed suspicious devices.
Identify the tool employed by James in the above scenario.
A.
Promise Detect
B.
DriveLetlerView
C.
ESEDatabaseView
D.
ProcDump
Your answer:
0 comments
Sorted by
Leave a comment first