Window Forensics

General (Technical, Procedural, Software, Hardware etc.)

Last Post by p38cyq 5 years ago

4 Posts

3 Users

0 Reactions

2,360 Views

RSS

muzlee101

(@muzlee101)

New Member

Joined: 6 years ago

Posts: 2

Topic starter 30/09/2021 6:59 am [#19250]

Hi, Any body please guide me where to track the date/time change information of window machine. what specific files record the event of date change in registry and event logs. please guide step by step.

Quote

p38cyq

(@p38cyq)

Trusted Member

Joined: 15 years ago

Posts: 44

31/10/2021 1:46 pm

You should familiarize yourself with the Windows Logbooks.

ReplyQuote

Lautarob

(@lautarob)

Active Member

Joined: 10 years ago

Posts: 3

04/11/2021 12:50 pm

@p38cyq Hello, what you you mean by "Windows Logbooks"?. Are you referring to the logs stored under Windows\System32\Logs; the ones under Windows\System32\LogFiles or what else?

Thanks!

ReplyQuote

p38cyq

(@p38cyq)

Trusted Member

Joined: 15 years ago

Posts: 44

07/11/2021 10:50 am

In the searchbox, lower left on your screen, type "eventvwr.msc"

ReplyQuote