Is there a definitive way to determine if and when a WiFi connection was used (laptop)?
Is there a definitive way to determine if and when a WiFi connection was used (laptop)?
Which OS? The registry information is different but a simple answer is that it is possible and even, in some cases, possible to geolocate where the access was made.
Windows XP.
Look here for a start.
http//
Just do it…
I did a presentation on this a couple of months ago at a conference in Brazil.
Here's a link to the slides.
http//
If you have any questions, feel free to email me. I can send you an updated version (although not much has changed).
Eric,
Excellent presentation!
I agree entirely with keydet89, excellent presentation.
There were a few bits in there that I did not know.
Very good stuff!
Also check out
http//
And what about mac changers, like Technitium MAC Address Changer !?
This software just writes a value into the windows registry. When the Network Adapter Device is enabled, windows searches for the registry value 'NetworkAddress' in the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1- 08002bE10318}\[ID of NIC e.g. 0001]
If a value is present, windows will use it as MAC address, if not, windows will use the hard coded manufacturer provided MAC address.
After that you can retrieve orginal MAC.