Exit GCFR GIAC Cloud Forensics Responder (GCFR)
Question 3 of 5
0% complete
Q3 Single choice

An analyst is reviewing a case involving an actor who leveraged PowerShell Cloud Shell to achieve their goals.

Where can the analyst And logs depleting this activity?

  • A

    Network flow logs for the environment

  • B

    .wget hsts file

  • C

    Audit logs for the environment

  • D

    .bash_history file

Previous Next