Question

Describe five ways in which Process Explorer (procexp) can be used in computer forensics as part of an investigation

Answer 1

Answer:

 The process explorer is mainly used for tracking the actual problems in the system. Process explorer is also known as proc-exp and it is also used as system monitoring where it monitor the microsoft window that are typically created by the SysInternals.  

The following are the five ways in which the proc-exp (Process explorer) are used in the computer forensics for the purpose of investigation are:

• The process explorer mainly provide the various types of functionality to the task manager for monitoring the system properly.
• It basically used in the system for tracking the main problems.
• It used in computer forensics for tracking the system problems and it give the detail information about the system memory also.
• It keeps track all the virus and malicious software in the computer system.
• It helps for investigation purpose as by using the process explorer we can get all the information about the particular computer system and software.