tag:blogger.com,1999:blog-9518042.post4297782385830199640..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: LinksUnknownnoreply@blogger.comBlogger2125tag:blogger.com,1999:blog-9518042.post-38509930667618322852009-07-30T05:51:51.163-05:002009-07-30T05:51:51.163-05:00How about the prodspec.ini file?How about the prodspec.ini file?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-91609745285486689962009-07-29T23:12:55.769-05:002009-07-29T23:12:55.769-05:00It's not quite as accurate, but the computer f...It's not quite as accurate, but the computer forensics task force work with uses the boot.ini file, as it specifies the version of Windows it'll boot. Yes, it could be changed, but so could the registry values you're mentioning.jaymcjayhttps://www.blogger.com/profile/01811333295782525169noreply@blogger.com