Eccouncil Exam 312-49 Topic 1 Question 77 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 77
Topic #: 1

Which among the following tools can help a forensic investigator to access the registry files during postmortem analysis?

ARegistryChangesView

BRegDIIView

CRegRipper

DProDiscover

Show Suggested Answer

Suggested Answer: C

by Luann at Mar 06, 2025, 08:32 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nickolas

26 days ago

ProDiscover? More like Pro-Discover-that-it's-not-the-right-tool-for-this-job.

upvoted 0 times

...

Glory

28 days ago

I heard RegRipper is the go-to tool for registry forensics. It's like the Swiss Army knife of the registry world!

upvoted 0 times

Svetlana

8 days ago

I prefer using ProDiscover for accessing registry files during postmortem analysis.

upvoted 0 times

...

Mitzie

20 days ago

I agree, RegRipper is a powerful tool for registry forensics.

upvoted 0 times

...

Mica

1 months ago

RegistryChangesView? Sounds more like a tool for monitoring registry changes, not forensic analysis.

upvoted 0 times

Cecilia

2 days ago

D) ProDiscover

upvoted 0 times

...

Lilli

15 days ago

C) RegRipper

upvoted 0 times

...

Vannessa

16 days ago

A) RegistryChangesView

upvoted 0 times

...

Helga

1 months ago

ProDiscover? Seriously? That's more of a general forensic suite, not specifically for registry analysis.

upvoted 0 times

Tamekia

22 days ago

C) RegRipper is also a good tool for postmortem analysis.

upvoted 0 times

...

Chu

29 days ago

A) RegistryChangesView would be a better choice for accessing registry files.

upvoted 0 times

...

Tashia

1 months ago

I was just about to say RegRipper! It's a powerful tool for extracting and parsing registry data during investigations.

upvoted 0 times

...

Pansy

2 months ago

RegRipper seems like the obvious choice here. It's a well-known forensic tool for analyzing registry files.

upvoted 0 times

Elenore

8 hours ago

I'm not familiar with RegDIIView, is it commonly used for forensic investigations?

upvoted 0 times

...

Mariann

2 days ago

I've heard good things about RegistryChangesView for postmortem analysis.

upvoted 0 times

...

Veda

20 days ago

I think ProDiscover could also be useful for accessing registry files.

upvoted 0 times

...

Theron

27 days ago

I agree, RegRipper is a great tool for analyzing registry files.

upvoted 0 times

...

Talia

2 months ago

I'm not sure, but I think A) RegistryChangesView could also be a useful tool for accessing registry files.

upvoted 0 times

...

Valentin

2 months ago

I disagree, I believe the correct tool is D) ProDiscover.

upvoted 0 times

...

Nobuko

2 months ago

I think the answer is C) RegRipper.

upvoted 0 times

...