74,500 views
45 votes
45 votes
Gwendolyn is a digital forensics expert. She has to search for evidence by checking drivers and their installation dates. Which forensic tool would be most useful to her? OA. OB. file analysis tool OC. database forensic tool OD. registry analysis tool disk and data capture tool​

User Felipe Vasconcelos
by
2.8k points

1 Answer

6 votes
6 votes

Final answer:

A registry analysis tool would be the most helpful for Gwendolyn to search for evidence by checking drivers and their installation dates in the system's registry.

Step-by-step explanation:

Gwendolyn, as a digital forensics expert looking to check drivers and their installation dates, would find a registry analysis tool most useful. This type of tool can scan through the system's registry, where information about drivers and their installation dates are typically stored. The registry is a database that Windows operating systems use to store configuration information about the software and hardware on a computer. By analyzing the registry, Gwendolyn can gather evidence related to the creation, modification, and last access times associated with drivers.

User Reuelab
by
2.8k points