Câu 34: GCIH: GIAC Certified Incident Handler
An investigator performing an initial analysis of a memory image identified a suspicious URL while using the strings utility. A second investigator attempting to recreate the results cannot find the same URL when executing the command below. What could be the cause?$ strings CASE-43110.mem > case-43110.strings.txt
Nội dung câu hỏi
An investigator performing an initial analysis of a memory image identified a suspicious URL while using the strings utility. A second investigator attempting to recreate the results cannot find the same URL when executing the command below. What could be the cause?$ strings CASE-43110.mem > case-43110.strings.txt
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. The memory image is password protected
- B. The memory image is compressed
- C. The URL is in ASCII format — đáp án hiện tại
- D. The URL is in little endian format
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.