tag:blogger.com,1999:blog-9518042.post112085514453298640..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Where, oh, where did my little SSID go...?Unknownnoreply@blogger.comBlogger4125tag:blogger.com,1999:blog-9518042.post-67637024277048489022007-01-08T11:33:00.000-05:002007-01-08T11:33:00.000-05:00I've noticed also that the BSSID/MAC address can b...I've noticed also that the BSSID/MAC address can be found within this registry entry.<br /><br />At around file offset 8. Fortunately I had the MAC address of the access points prior to a recent examination as a result of doing a wireless network assessment using Kismet :-)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-29481161675101908942006-10-05T10:29:00.000-05:002006-10-05T10:29:00.000-05:00This worked wonders. I found over 30 "Static" entr...This worked wonders. I found over 30 "Static" entries showing access sites. Thanks again.Unknownhttps://www.blogger.com/profile/03064657731848146722noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-1124472934300123192005-08-19T12:35:00.000-05:002005-08-19T12:35:00.000-05:00Glad you liked it...I'm looking at that key as par...Glad you liked it...I'm looking at that key as part of every case now, particularly on XP laptop images.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-1124466958092998652005-08-19T10:55:00.000-05:002005-08-19T10:55:00.000-05:00Thanks for the pointer. While looking for unauth...Thanks for the pointer. <BR/>While looking for unauthorized access points/WLAN traffic, I ran across a couple client computers doing probe requests for a "company" access point that doesn't exist. Perhaps in the past an employee had one set up, or these folks got "AP spoofed".Anonymousnoreply@blogger.com