Question

One of the first steps in any forensic examination should be to check the logs. In the __________ folder, you will find a subfolder named app profile. This will contain lists of recently opened applications as well as temporary data used by applications.

Answer 1

The answer is "var/vm".

Step-by-step explanation:

In computer science, the forensic examination is also known as a digital forensics field. This field used to include evidence found in computers and digital storage devices.

• It is a software that checks the evidence and this software is installed in the computer system and all the files of this software are stored in local disk C.
• Inside the app profile, there are var folder is available inside this folder another folder is found that is vm in this folder all data is stored.