lab5

docx

School

University of Cincinnati, Main Campus *

*We aren’t endorsed by this school

Course

3072

Subject

Computer Science

Date

Feb 20, 2024

Type

docx

Pages

1

Uploaded by BaronKnowledgeMule9

Report
1. [SYSTEM] What is the timezone of the computer? UTC 2. [SYSTEM] What is the hostname of the computer? BarClay 3. [SYSTEM] What are the two IP Addresses of the DHCP Name Servers? 217.237.150.97, 194.25.2.129 4. [SOFTWARE] What is the default username? Henry T. MErhausen 5. [SOFTWARE] What is the Operating System and Service Pack? Windows XP 5.1 , Service Pack 1 6. [SOFTWARE] Who is the registered owner of the computer? Henry T. Merhausen 7. [NTUSER.dat] What is the last Network Drive location that the user mapped? \\data\data 8. [NTUSER.dat] What was the last *.rar file that the user accessed? D:/Delphi6\WinHEx\Registry Files.rar 9. [NTUSER.dat] What URL did the user recently Type ? http://www.winhex.com/ 10. [SAM] How many user accounts are listed under the “Names” key? 8 11. [SYSTEM] What is the timezone of the computer? UTC 12. [SYSTEM] What is the hostname of the computer? Barclay 13. [SYSTEM] What mounted device drive letter is assigned to the CD-ROM drive? (D:) 14. [SOFTWARE] What is the Operating System and Build number? Windows, Build number: 1.511.1 15. [SOFTWARE] What is the Last Used Username? Henry T Merhausen 16. [SOFTWARE] What is the AutoLogon SID? Reg_DWORD 17. [SAM] Is the Administrator account enabled or disabled? Enabled 18. [SAM] What is the full name of user “cfttu”? Did not appear for me 19. [NTUSER.DAT] What evidence eliminating software is set to start in monitor mode? Run a second forensics tool to see if you got the same results 20. [NTUSER.DAT] What command was most recently run by the user? One DRive
Discover more documents: Sign up today!
Unlock a world of knowledge! Explore tailored content for a richer learning experience. Here's what you'll get:
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help