medium10 pts · first answer countsincident-responsewindows-forensicsmalware-delivery

Where a file was downloaded from

On a Windows host you run this and get the output below. What can you conclude?

PS> Get-Content .\invoice.iso -Stream Zone.Identifier
[ZoneTransfer]
ZoneId=3
ReferrerUrl=https://mail.google.com/
HostUrl=https://files-share[.]top/dl/invoice.iso

A.The file was created by the user on this computer and never downloadedB.The file came from a USB stick that was plugged into the computerC.The file was copied from the company's internal file serverD.The file came from the internet via files-share[.]top, with Gmail as referrer

Discussion 0

Join free to post in the discussion.

Where a file was downloaded from

Discussion 0

Related questions