Re: Initial Machine login - Computer Forensics 101

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2008-02-02 Michael Condon wrote:
> Here is a Computer Forensics 101 question.

For which the forensics list would've been much more appropriate than
security-basics.

[...]
> 1. Assuming it is an XP/Vista machine, how can I log in as
> administrator?

Reset the administrator password.

> 2. Is the second approach to make a bistream copy of the hard drive
> using an external USB har drive enclosure and proceed that way? 

No, that would be the first step.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq