A CHFI has been asked to recover browser history from a seized Microsoft Edge browser on a Windows system. This is important to pinpoint the suspect's online activities. The suspect was known to clear their browser history frequently. Which tool and path would most efficiently recover the required data?

A. MZCacheView tool; Path: C:UsersWAppDataLocalMozillaFirefoxProfilesXXXXXXXX.defaultcache2

B. MZHistoryView tool; Path:C:UsersWAppDataRoamingMozillaFirefoxProfilesXXXXXXXX.defaultplaces.sqlite

C. Browsing HistoryView tool; Path: C:UsersAdminAppDataLocalMicrosoftWindowsHistory

D. Browsing HistoryView tool; Path: C:UsersAdminAppDataLocalMicrosoftWindowsWebCache








 

Suggested Answer: D

Community Answer: C



This question is in 312-49V10 EC-Council Computer Hacking Forensic Investigator (CHFI) v10 Exam
For getting EC-Council Computer Hacking Forensic Investigator (CHFI) Certificate







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.