GCFA: GIAC Certified Forensic Analyst

By GIAC · Question Mode

QuestionQ17

Introduction to Memory Forensics

John is a Technical Support Executive at ABC Inc. The company network has ten computers, all running Windows XP Professional. John is using a computer on which he has enabled hibernation. He shuts down the computer by using hibernation mode. What happens to the data after the system is powered off through hibernation?

Explanation

Hibernation saves the current system state from memory to the hard disk before power is turned off, allowing the session and open work to be restored when the computer starts again.

Community Discussion

No comments yet. Be the first to start the discussion!