Question
A forensic examiner captures RAM from a live system. What may be found?
Select an option. Your answer will be checked instantly.
Correct Answer: A. Running processes and active network connections
Explanation:
RAM can contain volatile runtime artifacts.
Leave a Reply