In addition to the event Subtype ‘New Unapproved File to Computer’, what other event subtype is likely to be associated with this sequence?

A process has created a number of interesting (executable) files in one sequence.

In addition to the event Subtype ‘New Unapproved File to Computer’, what other event subtype is likely to be associated with this sequence?
A . File Upload Completed
B . New File Discovered on Startup
C . File Group Created
D . File Properties Modified

View Answer

Answer: B