What information do Windows Jump Lists provide that can aid investigators?

What information do Windows Jump Lists provide that can aid investigators?

• A. They reveal system hardware configuration details.
• B. They show recently accessed items and tasks related to a user's activity.
• C. They store browser cookies for all sites.
• D. They log hardware events.

Answer: (B)

Windows Jump Lists reveal what a user recently opened or what actions they performed within an application. When you right-click an app icon, you see a list of recently accessed documents or pages and quick actions tied to that program. This content—file names, paths, and the order in which items were used—helps investigators reconstruct what the user was working on, when, and in what sequence. Jump Lists are tied to the user’s profile, so they can serve as a timeline of recent activity. They aren’t about hardware details, cookies, or hardware event logs, which are separate artifacts.

Windows Jump Lists reveal what a user recently opened or what actions they performed within an application. When you right-click an app icon, you see a list of recently accessed documents or pages and quick actions tied to that program. This content—file names, paths, and the order in which items were used—helps investigators reconstruct what the user was working on, when, and in what sequence. Jump Lists are tied to the user’s profile, so they can serve as a timeline of recent activity. They aren’t about hardware details, cookies, or hardware event logs, which are separate artifacts.