ECCouncil CHFI v10 312-49v10 Question # 148 Topic 16 Discussion

312-49v10 Exam Topic 16 Question 148 Discussion:

Question #: 148

Topic #: 16

Which following forensic tool allows investigator to detect and extract hidden streams on NTFS drive?

Stream Detector

TimeStomp

Autopsy

analyzeMFT

Get Premium 312-49v10 Questions

Actual exam question for ECCouncil 312-49v10 exam by Rael6658 at May 2, 2026, 11:23:34 AM

Chosen Answer: A B C D
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.