GIAC Exam GASF Topic 7 Question 3 Discussion

Actual exam question for GIAC's GASF exam

Question #: 3
Topic #: 7

An Android device user is known to use Facebook to communicate with other parties under examination.

There is no evidence of the Facebook application on the phone. If there was Facebook usage where would an examiner expect to find these artifacts?

Acom.android.chrome/app_chrome/Default/Local Storage

Bdmappmgr.db

C/data/system/packages.xml

DAndroidManifest.xml

Show Suggested Answer

Suggested Answer: B

by Pete at May 03, 2022, 01:08 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!