Q84
Single choice
Following an advanced persistent threat attack, a CHFI investigator is called in to acquire data from the compromised system. Given the wide range of potential data sources, the investigator needs to prioritize the order of data collection based on volatility.
Which of the following would be the correct order to collect data in this scenario?