Exam 312-49v10 topic 1 question 358 discussion

NT 6.0 and Higher. Vista and above. C is correct

https://bookshelf.vitalsource.com/reader/books/9781635676969/pageid/443 Module 05: Defeating Anti-forensics Tecniques / LO#02: Discuss Data Deletion and Recycle Bin Forensics / Recycle Bin in Windows Page 444: The storage location of Recycle Bin depends on type of OS and file system Recycle Bin storage location on FAT file systems: On older FAT file systems (Windows 98 and prior), it is located in Drive:\RECYCLED Recycle Bin storage location on NTFS file systems: On Windows 2000, NT, and XP it is located in Drive:\RECYCLER\<SID> On Windows Vista and later versions, it is located in Drive:\$Recycle.Bin\<SID> --> Windows 8.1

Windows Vista and later: $Recycle.Bin Windows XP and earlier: Recycler

From EC Council: In Windows Vista and later versions, the deleted files are renamed by the OS using the following format: $ [...] The $R and $I files are located at C:\$Recycle.Bin\<USER SID>\

according to CHFI V10 book, On Windows Vista and later versions, it is located in Drive:\$Recycle.Bin\<SID> Answer is Windows 8.1

It´s supposed that Drive\RECYCLER is the answer for XP and $Recycle.Bin for vista and later versions. I suppose is correct in the context but not in the content according to the CHFI V9 Module 5 page 472

https://www.magnetforensics.com/blog/artifact-profile-recycle-bin/

Windows 8.1 is the answer

in windows 8.1 not xp https://it.wikipedia.org/wiki/Cestino_(informatica)