Free Preparation Discussions
MENU
Eccouncil 212-89 Exam - Topic 3 Question 63 Discussion
Topic #: 3
Clark is investigating a cybercrime at TechSoft Solutions. While investigating the case,
he needs to collect volatile information such as running services, their process IDs,
startmode, state, and status.
Which of the following commands will help Clark to collect such information from
running services?
WMIC (Windows Management Instrumentation Command-line) is a command-line tool that provides a unified interface for Windows management tasks, including the collection of system information. It allows administrators and forensic investigators to query the live system for information about running services, their process IDs, start modes, states, and statuses, among other data. The use of WMIC is particularly valuable in incident response scenarios for gathering volatile information from a system without having to install additional software, which might alter the state of the system being investigated. By executing specific WMIC commands, Clark can extract detailed information about the services running on a system at the time of the investigation, making it an essential tool for collecting volatile data in a forensically sound manner.
Nieves
9 months agoGwenn
9 months agoShenika
10 months agoCamellia
10 months agoJackie
10 months agoEarlean
10 months agoSkye
11 months agoSena
11 months agoJessenia
11 months agoVeronika
11 months agoBuffy
11 months agoChantay
11 months agoMitzie
11 months agoKaitlyn
11 months agoAlfred
11 months agoBobbye
2 years agoSabine
2 years agoLinn
2 years agoColene
2 years agoNydia
2 years agoCordelia
2 years agoDorthy
2 years agoErnie
2 years agoMitsue
2 years agoLashon
2 years agoRueben
2 years agoKrissy
2 years agoMichell
2 years agoVesta
2 years agoWillie
2 years agoLizbeth
2 years agoKimbery
2 years agoDenae
2 years ago