Penetration Testing mailing list archives
Re: Light forensics
From: Wim Remes <wremes () gmail com>
Date: Thu, 7 Jan 2010 02:08:15 +0100
Eduardo, on your first question, I'm not aware of any such logs in a default install of Windows XP. for your second question, I'd suggest to have a look at scalpel : http://www.forensicswiki.org/wiki/Scalpel Cheers, W On 05 Jan 2010, at 15:08, Eduardo Sierra wrote:
Hi, We had a security incident, and i'm doing a "light" forensics. Is there a log you can check to see IP Address Changes in a Windows XP Box? Any good free tool to undelete files? Many thanks, Eduardo Sierra ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Light forensics Eduardo Sierra (Jan 06)
- Re: Light forensics Alonso Caballero Quezada / ReYDeS (Jan 11)
- Re: Light forensics Wim Remes (Jan 11)
- Re: Light forensics Tom Ritter (Jan 11)
- Re: Light forensics Adrian Puente Z. (Jan 11)
- Re: Light forensics H. Kurth Bemis (Jan 11)
- RE: Light forensics Levenglick, Jeff (Jan 11)
- RE: Light forensics Dave Kleiman (Jan 11)
- Re: Light forensics Felipe Martins (Jan 18)
- RE: Light forensics Boyd, Chad (Jan 18)
- Re: Light forensics Adel Abushaev (Jan 11)