Eccouncil Exam 312-49 Topic 1 Question 77 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 77
Topic #: 1

Which among the following tools can help a forensic investigator to access the registry files during postmortem analysis?

ARegistryChangesView

BRegDIIView

CRegRipper

DProDiscover

Show Suggested Answer

Suggested Answer: C

by Luann at Mar 06, 2025, 08:32 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

4 days ago

RegRipper seems like the obvious choice here. It's a well-known forensic tool for analyzing registry files.

upvoted 0 times

...

8 days ago

I'm not sure, but I think A) RegistryChangesView could also be a useful tool for accessing registry files.

upvoted 0 times

...

9 days ago

I disagree, I believe the correct tool is D) ProDiscover.

upvoted 0 times

...

11 days ago

I think the answer is C) RegRipper.

upvoted 0 times

...