How dare you ask such a basic question. From now on you should only ask questions that are deemed worthy of responses from those who know everything.
This site could be helpful but way too many egos and so so unfriendly.
This Forum members are usually Ok and friendly, just occasionally being pissed off by some one -) Don’t forget that there are some real geeks in this industry, and the weather in they world is not always calm. On the other hand these geeks are the ones who solve technical problems and share their know-how with everyone.
I believe the original question was OK and the person already took one step in the right direction by joining this forum, As long as he/she doesn’t ask to do his complete homework of course. -)
How dare you ask such a basic question. From now on you should only ask questions that are deemed worthy of responses from those who know everything.
This site could be helpful but way too many egos and so so unfriendly.
Not at all!
After studying forensics for 3/4 years as the OP has, I don't think it unreasonable that he should be able to find the answer to such a question by very basic research. Step 1, find your own IP; Step 2, search for it. No one knows everything about forensics, least of all me, but a basic part of being a good analyst is being able to work things through yourself rather than being spoon-fed answers.
OK, chaps, point made. I have a good deal of sympathy for people irritated by those who are just looking for easy answers but we don't need to gang tackle every newbie who steps out of line (we've already lost one respected member because of this.) Please remember that this site is as much for the inexperienced as it is the old hands and threads like this don't make it any easier for newcomers to jump in and ask for help when they're struggling.
Jamie
How dare you ask such a basic question. From now on you should only ask questions that are deemed worthy of responses from those who know everything.
This site could be helpful but way too many egos and so so unfriendly.
It is not about asking questions that are "basic" or "worthy of response".
The point that I am making is that there are more ways than one to be helpful. Giving the direct answer to someone who is in the process of learning in this arena might be helpful, but it is much less helpful than explaining the processes that will assist them to work the answer out for themselves.
I have not known the answer to this question in the past and I have gone about finding out in the way I suggest. By going through such a process you will often learn something more than you expect. For example by searching for my IP address I have found it in places other than the registry which then enables me to look there in the future on other cases when I am trying to identify a machine's IP address.
I also think it could be considered to be good forum etiquette to search the forum to see if the question was already asked and answered previously. e.g. http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=4831
At present there seems to be an over supply of computer forensic graduates and students need to do everything they can to show they are independent learners. There are prospective employers in this forum and they will be more impressed with potential candidates who have shown an ability to work things out for themselves.
I apologise to Mr Fonzy if he took this personally it is a general observation.
H
“Give a man a write-blocker; you have images for today. Teach a man to forensicate; and you have an investigator for a lifetime”
How dare you ask such a basic question. From now on you should only ask questions that are deemed worthy of responses from those who know everything.
This site could be helpful but way too many egos and so so unfriendly.
I have found 99% of the ppl on this forum to be helpful. Right about this time and then again in around May you will magically see an influx of computer forensic questions from people with one post.
I think the frustration comes from people registering for a site to only gain an answer to a question which will help them.
If ppl wanted to avoid that, register for the site early and post something you have learned in class, anything…. You will find SOMEONE who will benefit from what you post (although they may not admit it publicly to avoid being ribbed by all the rest of us)
IMHO this is a fault of most college forensic courses, students should be made to register at one of the forensic forums and post at least once a week with something, a question, a comment, something they found out, etc. Instead of that we get ppl posting about a thesis or a question that is due tomorrow.
IMHO this is a fault of most college forensic courses, students should be made to register at one of the forensic forums and post at least once a week with something, a question, a comment, something they found out, etc.
Good idea, although I have had some meetings with a number of universities and suggested to the lecturers that they should join these forums as they appear to be noticeably absent; but so far I have not spotted anyone from these establishments pop up.
H
Can I play "total n00b"? ?
The information is here
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
I am looking at a Registry inside a dd image I made and I don't seem to find
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
I can only see
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
and
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\
…ducking REALLY fast…. wink
mrgreen
jaclaz
jaclaz
Off the top of my head I suspect it is because the CurrentControlSet is a pointer on a live system to a numbered set and you are looking at an image.
The CurrentControlSet is the one indicated by the value in HKLM\System\Select.
H