GCIH Exam QuestionsBrowse all questions from this exam

GCIH Exam - Question 126


Which of the following Volatility commands will display the date and time an image was collected?

Show Answer
Correct Answer: B

The Volatility command to display the date and time an image was collected is 'imageinfo'. This command provides general information about the memory image, including details such as the date and time the memory image was captured, the operating system, service pack, and other metadata that can help with further analysis.

Discussion

2 comments
Sign in to comment
Ax3l91Option: B
Aug 17, 2023

imageinfo

XBal
Sep 16, 2024

Answer should be "B". https://github.com/volatilityfoundation/volatility/wiki/Command-Reference#imageinfo