±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35636
New Yesterday: 3 Visitors: 167

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Wireless settings on XP

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

keydet89
Senior Member
 

Wireless settings on XP

Post Posted: Jul 02, 05 11:44

All,

Does anyone know where wireless information is maintained on an XP system?

When I've gone away, I've connected to the wireless in a hotel, and when I come back, I connect again to my WAP with no trouble. This tells me that Windows XP has a way of keeping track of these things, but when I search for the SSID in the Registry, I don't find anything.

Does anyone know where this data is maintained? I know that Cisco and 3Com clients have been found to maintain this data in the Registry, but I haven't been able to find anything specific through research or testing...yet.

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com  
 
  

andy1500mac
Senior Member
 

Re: Wireless settings on XP

Post Posted: Jul 02, 05 13:32

Good Morning Harlan,

There seems to be quite a bit of info in the following key:

HKLM\SYSTEM\CONTROLSET001\ENUM\PCMCIA\ … detailing information for the PCMCIA slot. Mine includes Dell true mobile settings although I see no mention of my ssid.

I have a sub folder numbered one (1) with another interesting sub folder called LogConf….might be a start.

Andrew-  
 
  

andy1500mac
Senior Member
 

Re: Wireless settings on XP

Post Posted: Jul 03, 05 01:40

Looks to me as if the bulk of the info in the registry pertains to interrupts, drivers, guid and the card manufacturer.

Most of the configuration if is probably stored on the card itself. I assume your card is configured to connect to your preferred network (SSID),the home/work one so it will automatically connect when within range...if not it will search out non preferred.

Here is some MS info for windows XP and the 802.11 standard along with some reg keys pertaining to the protocols transmission behavior.

www.microsoft.com/tech...e7492.mspx

Andrew-  
 
  

keydet89
Senior Member
 

Re: Wireless settings on XP

Post Posted: Jul 03, 05 11:32

Andy

Thanks for the replies.

Your second response does point to registry keys, but the protocols they apply to are for authentication, not communications or transmission over the Internet.

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com  
 
  

keydet89
Senior Member
 

Re: Wireless settings on XP

Post Posted: Jul 10, 05 15:41

Okay, I found them and blogged the info...

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com  
 

Page 1 of 1