Saturday, October 27, 2018

The registry - where to find where I was connected - Wireless

Alex wants to determine whether the user of a company-owned laptop accessed a malicious wireless access point. Where can he find the list of wireless networks that the system knows about?
  1. The registry
  2. The user profile directory
  3. The wireless adapter cache
  4. Wireless network lists are not stored after use.


The Windows registry stores a list of wireless networks the system has connected to in the registry under HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\NetworkList\Profiles. This is not a user-specific setting and is stored for all users in LocalMachine.

No comments:

Post a Comment

O que foi o caso da Sterling Currency Group?

  O caso da Sterling Currency Group ( United States v. Bell / Rhame, Shaw e Bell ) foi uma das maiores ações penais federais dos Estados Un...