Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
When a user installs an application, deletes an application or runs an application, traces of it can be found where?
Prefetch Files
Shortcut files
recycle bin
my documents
Prefetching assists in improving system performance and data processed can be found in the Windows\Prefetch directory. Traces of any application that is recovered can be useful during a forensic investigation. EDIT: This is only true if application prefetching or application and boot prefetching is enabled (a value of 1 or 3 in the registry)
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.