Briefly describe the Windows Forensic Toolchest (WFT).
What will be an ideal response?
WFT is essentially a driver script for running a series of tools that identifies and lists running processes, active network connections, and other activity, then saves the output on an external medium such as a thumb drive. It is designed for forensics use and includes a number of integrity checks such as verifying the tools before they are run.
You might also like to view...
A building, office equipment, computer hardware, and network equipment are examples of _____?.
A. ?capital assets B. expense items C. internal cross-charges D. None of these answers
_____________ virtual devices are a software implementation of typical PCI devices.
Fill in the blank(s) with the appropriate word(s).
The computer or print server device offering the printer share is the ____.
A. network print server B. network print manager C. network print client D. network print provider
Of the three components of access time in a movable-head DASD, ____ is the slowest.
A. seek time B. search time C. transfer time D. delay time