±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36459
New Yesterday: 3 Visitors: 132

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

RegRipper v2.8 available

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

keydet89
Senior Member
 

RegRipper v2.8 available

Post Posted: Apr 30, 13 17:55

If you're a RegRipper user, you may want to take a look at this blog post:

windowsir.blogspot.com...dates.html

thanks.  
 
  

jhup
Senior Member
 

Re: RegRipper v2.8 available

Post Posted: May 01, 13 21:03

A continued, thank you.  
 
  

Chris55728
Senior Member
 

Re: RegRipper v2.8 available

Post Posted: May 02, 13 15:21

Thanks Harlan, appreciated.  
 
  

keydet89
Senior Member
 

Re: RegRipper v2.8 available

Post Posted: May 02, 13 17:28

Thanks, gents...I'd really appreciate your thoughts on the updates...  
 
  

Sonj
Newbie
 

Re: RegRipper v2.8 available

Post Posted: May 17, 13 05:44

System Hive - ControlSet001\Control\TimeZoneInformation
Bias and ActiveTimeBias values should be interpreted as signed integers, not unsigned  
 
  

DennisMcr
Newbie
 

RegRipper v2.8 gets "password required" wrong?

Post Posted: May 17, 13 14:12

I think it says "password not required" when one is required on a Windows 7 Home Premium, Version 6.1, SP1 machine. This applied to 2 user accounts on the same computer.

My reasons for saying this are:

Ophcrack has found a password.
There is a password hint.
There was an incorrect password logon attempt at 07:49
There was a logon at 07:55
The computer was seized at 08:30
ForensicUserInfo also says a password is required.

Unfortunately I'm unable to VM this computer.  
 
  

randomaccess
Senior Member
 

Re: RegRipper v2.8 gets "password required" wrong?

Post Posted: May 17, 13 17:09

Yeah I've found ophcrack to be reliable at telling if there was a password on an account. I vaguely remember harlan mentioning in one of his books that the "password required' doesnt relate to whether there is a password currently set, but I may be mistaken; unfortunately my copies of the books are at work so I can't check.

- DennisMcr

Unfortunately I'm unable to VM this computer.


how come you aren't able to get a VM working? have you checked out the tutorials on justaskweg.com; I've found them incredibly helpful  
 

Page 1 of 2
Page 1, 2  Next