QuestionQ120

Tools/Systems/Programs

Sophia, a forensic expert, is examining a system for indicators of malware. She notes that the malware has modified Windows services and running processes to keep operating in the background without being detected. She must identify which services start automatically when the system boots.

Which tool should Sophia use to inspect Windows services configured to start automatically?

  • A Autoruns
  • B Task Manager
  • C Process Explorer
  • D Event Viewer
Explanation

Microsoft Sysinternals Autoruns enumerates programs configured to run during system boot or logon and includes auto-start Windows services, making it suitable for identifying services configured to start automatically.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!