Explain how web histories can be retrieved and how they can be used as evidence within a case.
Identify two logs commonly used within a forensics case. Explain how each is useful during an investigation.
Explain what portable executables are. How can these be useful in an investigation?
What are two common language runtimes? How might their presence affect an investigation?