Windows Digital Forensic -Writing
Zero days vulnerabilities in Digital Forensics… Please, discuss your views and ideas on how can we be prepared for zero day vulnerabilities and attacks. Share your views with your classmates and comment on at least two of your classmates’ posts.
msdf_531___week_5.pptx
Unformatted Attachment Preview
Windows Digital Forensics
MSDF-531
Dr. Scott Grimes
Week 5
Registry Analysis
• Registry Structure
• Name
• Type
• Data
Registry Analysis
• Registry Root Keys
•
•
•
•
•
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_USER
HKEY_CURRENT_CONFIG
Registry Analysis
• HKEY_LOCAL_MACHINE
•
•
•
•
•
SYSTEM
SOFTWARE
SAM
SECURITY
HARDWARE
Registry Analysis
• HKEY_USERS
• S-1-5-18
• SYSTEM PROFILE
• S-1-5-19
• LOCALSERVICE
• S-1-5-20
• NETWORK SERVICE
• S-1-5-21-…
• USER
• DEFAULT
• DEFAULT PROFILE FOR NEW USERS
Registry Analysis
• HKEY_CURRENT_USER
• POINTER TO THE CURRENT USER UNDER HKU
EVENT LOG Analysis
• Event logs can be easily accessed by looking at the Event Viewer
• Control PanelAll Control Panel ItemsAdministrative ToolsEvent Viewer
EVENT LOG Analysis
• Event Logs can assist us answering these questions
•
•
•
•
•
What happened?
When?
Who?
What systems are involved?
What resources are accessed?
EVENT LOG Analysis
• Security Log
• System Log
• Application Log
• Directory Service
• File Replication Server
• DNS Server
EVENT LOG Analysis
• New Event Logs can be summed up as…
• Setup
• Forwarded Events
• Application and Services
EVENT LOG Analysis
• Security Events Logs can be summed up as…
•
•
•
•
•
•
•
•
•
Account Logon
Account Mgmt
Logon Events
Directory Service
Object Access
Policy Change
Privilege Use
Process Tracking
System Events
EVENT LOG Analysis
• Security Events can have the following types…
•
•
•
•
•
Error
Warning
Information
Success Audit
Failure Audit
This Week’s Assignments…
• Reading Assignment:
• Chapters 7 and 8 in your textbook.
• Weekly Quiz:
• Chapter 7 & 8
• Discussion Assignment
• Week 5 Discussion
• Hands-on Assignment
• Week 5 Assignment: FTK Imager Assignment
Note: All Assignments are due by Sunday night at 11:59PM
…
Purchase answer to see full
attachment
Get Your Paper Before the Deadline. Our Services are 100% private and Confidential
Useful Links That Will Help You Around
Link to new order https://studentsolutionsusa.com/orders/stud/new
link to login page https://studentsolutionsusa.com/orders/login
New user registration link https://studentsolutionsusa.com/orders/register
Forgot Password https://studentsolutionsusa.com/orders/forgot/password
FREQUENTLY ASKED QUESTIONS
Question: How does this work?
Answer: Good Question. We are a group of a freelance board of students and professional essay writers. At our website, you may get help with any type of academic assignments: essay, coursework, term paper, business plan, case study, article review, research paper, presentation, and speech. Top writers can help with complex assignments such as dissertations, thesis papers, etc. All of them are professionals possessing excellent knowledge in their field of expertise, perfect writing skills, quality, and speed. When you place an order on our website, we assign it to the best writer. Once the writer finishes the work, the paper is submitted to our quality assurance desk who go through it and ensure it is unique and plagiarism free and that the instructions were followed to the detail. After this step we upload the paper in your account, we also send a copy to the email that you used to register the account with. we can guarantee you that the paper will be 100% plagiarism free. Besides, our services are 100% private and confidential
Question: How do I place an Order after getting to the order page
Answer: There are three major steps in the ordering process
Step 1 ....................................................paper details In this step, you will fill in the instructions of your paper; you can upload any materials that you feel will make your assignment a success. Besides, you can also email us at [email protected] Remember to specify the correct academic level. Please note that sources mean the number of references.
Step 2...................................................... Price calculation Kindly specify the number of pages, type of spacing and the correct deadline. This step will give you the estimated cost minus discount -- you may add the extra features if you wish.
Step 3 ....................................................discount and payment Use the discount code HAPPY2018 to enjoy up to 30% discount of your total cost After this step, proceed to safe payment; you can checkout using your card or PayPal Please note we will send the complete paper to the email you will provide while registering. A copy will also be uploaded to your account
Question: How will I know when my paper is complete? or How will I get the complete Paper?
Answer: Once we are done with the paper, we will be uploaded to your account. A copy will also be sent to the email you registered with. We can guarantee you the following:- 1. Our service is private and confidential; we don't spam or share your contacts with anyone 2. The final paper will be plagiarism free. We will send a Turnitin Report to the email you registered with 3. At our company, willing to do free unlimited revisions until you are satisfied with your paper
Question:- Am a new client, How can I get the guarantee that the paper will be completed and sent to me before my deadline?
Answer: Thank you for expressing your concerns. We would love to have you as our loyal customer. We are certain if we do good work, you will come back for me. Besides, you will give us referrals to your friends and family. For that reason, we can’t fail to deliver your paper within your specified time frame. We will ensure we submit the paper on time so that you can have enough time to go through it, if you have problems with the paper delivered, you can request a free revision. You are entitled to as many revisions as you would wish until you get a paper that satisfies you
Useful Links That Will Help You Around
Link to new order https://studentsolutionsusa.com/orders/stud/new
link to login page https://studentsolutionsusa.com/orders/login
New user registration link https://studentsolutionsusa.com/orders/register
Forgot Password https://studentsolutionsusa.com/orders/forgot/password
