•Identifying the operating system of the suspect computer will assist in quickly
ID: 3734884 • Letter: #
Question
•Identifying the operating system of the suspect computer will assist in quickly locating obvious evidence, or “low-hanging fruit.” The operating system typically identifies itself on start-up, but you should not be performing analysis on a live system. Most often all you have is the hard drive from the suspect machine or a previously gathered evidence file. Using the Web, make a chart of identifying characteristics for MS-Windows 95, MS-Windows 98, MS-Windows NT, MS-Windows 2000, MS-Windows XP, MS-Windows Vista, MS-Windows 7, and MS-Windows 8 that specifies where the system root, user profile, and user document folders can be found.
Explanation / Answer
Answer:
1)First you can double click on my computer icon,then a window appears which show all drives.
2)After that click tools option in menu bar.then a list will open select the folder option.A folder option dialogbox will appears after selecting a folder option.
3)By default general tab is selected in folder option dialog box so click on the view Tab
4)In vie tab under advance setting click on radio button show hidden files folder and drive use to show hidden files or folder.
5)Then uncheck the check box hide protected operating system file when you uncheck a check box a warning dialog box appear.click on yes button
6)After that click on ok button of folder option dialog box.then you return to the computer window
7)After that opens a drive which have an operating systemthen you are able to see the hidden files.
8)Find a boot.Inl file in that drive.Then open this file
9)Boot.Inl file is only used on that os which are earlier than windows xp.that is why a warning has written in the boot.lnl file in window 7 or vista.in windows 7 we have bootmgr and associated files to load operating system
Time out shows how much time taken to choice option for choosing a different os will remain on screen.default shows if timeout and the user have not selected any operating then which system will load .
10)After the close the Boot.lnl file with out makeing any changes
11)Then again open folder options dialog box and hide the hide protected os filescthen clisck on ok button
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.