Skip to content

CyberOps Associate

Cyberops Associate Host Based AnalysisEnglish

Practice session

Which host artifact most directly shows that cmd.exe was spawned by winword.exe on a Windows endpoint?

Loading your practice session…