https://www.cfreds.nist.gov/data_leakage_case/data-leakage-case.html
http://www.antionline.com/showthread.php?275382-Time-and-date-of-last-shutdown
#8. When was the last recorded shutdown date/time?
#3 참고.
HKLM\System\ControlSet\Control\Windows
shutdown time : 57-A9-48-B5-10-67-D0-01 (2015-03-25 15:31:05)
[우클릭] - [Data interpreter]
'Forensic > CFReDS-Data Leakage Case' 카테고리의 다른 글
| data leakage case #10~11, application install/execution logs (0) | 2018.09.17 |
|---|---|
| data leakage case #9, network interface with IP (0) | 2018.08.10 |
| data leakage case #7, last logon user (0) | 2018.08.10 |
| data leakage case #6, all accounts list (0) | 2018.08.10 |
| data leakage case #5, computer name (0) | 2018.08.10 |
