Computer Hacking Forensic Investigator (CHFI v10) — Question 208

Web browsers can store relevant information from user activities. Forensic investigators may retrieve files, lists, access history, cookies, among other digital footprints. Which tool can contribute to this task?

Answer options

• A. MZCacheView
• B. Google Chrome Recovery Utility
• C. Task Manager
• D. Most Recently Used (MRU) list

Correct answer: A

Explanation

MZCacheView is specifically designed to retrieve and display cached data from web browsers, making it the most suitable tool for forensic investigations regarding browser activity. The Google Chrome Recovery Utility is limited to recovering Chrome data but does not cover other browsers. Task Manager is used for monitoring system performance and processes, while the Most Recently Used (MRU) list simply shows recently accessed files without providing detailed browser activity.