All,
Does anyone know where wireless information is maintained on an XP system?
When I've gone away, I've connected to the wireless in a hotel, and when I come back, I connect again to my WAP with no trouble. This tells me that Windows XP has a way of keeping track of these things, but when I search for the SSID in the Registry, I don't find anything.
Does anyone know where this data is maintained? I know that Cisco and 3Com clients have been found to maintain this data in the Registry, but I haven't been able to find anything specific through research or testing…yet.
Thanks,
H. Carvey
"Windows Forensics and Incident Recovery"
Good Morning Harlan,
There seems to be quite a bit of info in the following key:
HKLM\SYSTEM\CONTROLSET001\ENUM\PCMCIA\ … detailing information for the PCMCIA slot. Mine includes Dell true mobile settings although I see no mention of my ssid.
I have a sub folder numbered one (1) with another interesting sub folder called LogConf….might be a start.
Andrew-
Looks to me as if the bulk of the info in the registry pertains to interrupts, drivers, guid and the card manufacturer.
Most of the configuration if is probably stored on the card itself. I assume your card is configured to connect to your preferred network (SSID),the home/work one so it will automatically connect when within range…if not it will search out non preferred.
Here is some MS info for windows XP and the 802.11 standard along with some reg keys pertaining to the protocols transmission behavior.
Andrew-
Andy
Thanks for the replies.
Your second response does point to registry keys, but the protocols they apply to are for authentication, not communications or transmission over the Internet.
H. Carvey
"Windows Forensics and Incident Recovery"
Okay, I found them and blogged the info…
H. Carvey
"Windows Forensics and Incident Recovery"
http//
http//windowsir.blogspot.com