GIAC Certified Forensic Analyst (GCFA) — Question 39

Which of the following command line tools are available in Helix Live acquisition tool on Windows?
Each correct answer represents a complete solution. Choose all that apply.

Answer options

• A. .cab extractors
• B. ipconfig
• C. netstat
• D. whois

Correct answer: A, B, C

Explanation

The correct answers are .cab extractors, ipconfig, and netstat, as these are tools that can be utilized within the Helix Live acquisition environment to gather system information and network details. The whois command, while useful for querying domain registration information, is not typically included in the Helix Live acquisition toolset.