312-49V11: Computer Hacking Forensic InvestigatorDemo

Ethan, a forensic investigator, has been assigned to examine a computer system suspected of involvement in malicious online activities. As part of the investigation, he must determine which applications have run on the system. By reviewing this data, he can identify whether malicious software was installed. To collect this information, Ethan needs to inspect the appropriate system directory where traces of executed applications are stored. Which directory should Ethan examine to locate traces of applications that have been run on the system?