SAL2
TryHackMe Security Analyst Level 2 (SAL2)
DfirEnglish
Exam overviewPractice session
When performing DFIR on a Windows system, an analyst wants to determine what processes were running at the time of a suspected compromise. Which artifact provides process creation history including command-line arguments?
Loading your practice session…