Saturday, October 27, 2018

The registry - where to find where I was connected - Wireless

Alex wants to determine whether the user of a company-owned laptop accessed a malicious wireless access point. Where can he find the list of wireless networks that the system knows about?
  1. The registry
  2. The user profile directory
  3. The wireless adapter cache
  4. Wireless network lists are not stored after use.


The Windows registry stores a list of wireless networks the system has connected to in the registry under HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\NetworkList\Profiles. This is not a user-specific setting and is stored for all users in LocalMachine.

No comments:

Post a Comment

Remote Hybrid and Office work