Team #3 - Lab 3 Investigating Windows

Team #3 - Lab 3 Investigating Windows - Lab #3 Report...

Info iconThis preview shows pages 1–4. Sign up to view the full content.

View Full Document Right Arrow Icon
Lab #3 Report – Investigating Windows Completed by Team 3 – Ron Stellabotte – rjs5125@psu.edu, 1
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
10/2/2010 Table of Contents Executive Summary…………………………………. .……………………………………………3 Introduction…………………………………. ..…. ..………………………………………………4 Section I: Analysis Questions…………………………. .………………………………………….5 Question #1…………………………………………………………………………….5 Question #2…………………………………………………………………………….5 Question #3…………………………………………………………………………….5 Question #4…………………………………………………………………………….6 Section II: Screen Shots……………………………….……….………………………………….7 Screen Shot from Task 2, Step 2……………………………………………………….7 Screen Shot from Task 2, Step 4……………………………………………………….8 Screen Shot from Task 3, Step 18. .…………………………………………………….9 Section III: Record Keeping……………………………………………………………. .……. ...10 Experiment Setting and Process………………. ..…………………………………….10 .10 Executive Summary Windows registry and master file table (MFT) are two key sources for investigating Windows systems. Windows 9 x/ME, Windows CE, and Windows NT/2000/XP/2003 stores the configuration data in registry. The MFT is the first file on the disk. MFT is the place where information about every file and directory on an NTFS volume is stored. The MFT file is created
Background image of page 2
when a disk partition is formatted. In this lab we were introduced the basics of Windows XP
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Image of page 4
This is the end of the preview. Sign up to access the rest of the document.

This note was uploaded on 12/10/2010 for the course IST 454 at Pennsylvania State University, University Park.

Page1 / 9

Team #3 - Lab 3 Investigating Windows - Lab #3 Report...

This preview shows document pages 1 - 4. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online