GIAC Related Exams
GASF Exam
Which of the following files provides the most accurate reflection of the device’s date/timestamp related to the
last device wipe?
As part of your analysis of a legacy BlackBerry device, you examine the installed applications list and it
appears that no third-party applications were installed on the device. Which other file may provide you with additional information on applications that were accessed with the handset?
While conducting forensic analysis of an associated media card, one would most often expect to find this particular file system format?