Courseiva

CHFI

Full exam simulation

4:00:00
1

Mobile and Malware Forensics

hard

A forensic examiner is analyzing an Android device that has been factory reset. Which of the following artefacts is MOST likely to still be recoverable from the device's flash memory after a factory reset, assuming no overwrite has occurred?

0 of 125 answered