The Ethical Hacker Network - How to delete the logs of MAC address and Host Name changes ?

Latest Additions

Who's Online

EH-Net News Feeds

Latest Additions

EH-Net > Ethical Hacking Discussions and Related Certifications > Forensics (Moderator: don) > How to delete the logs of MAC address and Host Name changes ?

Pages: [1] Go Down

« previous next »

	Author	Topic: How to delete the logs of MAC address and Host Name changes ? (Read 5141 times)
0 Members and 1 Guest are viewing this topic.

elglobie

Newbie

Offline

Posts: 3

How to delete the logs of MAC address and Host Name changes ?

« on: January 02, 2010, 04:42:39 PM »

I did change the MAC address in the registry myself under Vista.

Someone told me that if I change something directly in the registry, nothing is logged ....

Assuming that it is logged where in Event Viewer would it be logged ?
Under Windows logs or Application and Services logs ?

And where is it logged in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog ?


« Last Edit: January 02, 2010, 06:43:08 PM by elglobie »	Logged

Ketchup

Hero Member

Offline

Posts: 1006

Re: How to delete the logs of MAC address and Host Name changes ?

« Reply #1 on: January 02, 2010, 10:18:27 PM »

Event Log should not log the change you made, however, there are other ways of getting an idea of what you changed. One such way is comparing the current registry settings with past registry settings found in your system restore.


	Logged

~~~~~~~~~~~~~~
Ketchup

elglobie

Newbie

Offline

Posts: 3

Re: How to delete the logs of MAC address and Host Name changes ?

« Reply #2 on: January 03, 2010, 04:44:19 AM »

I have turned off system restore completely Grin


	Logged

Ketchup

Hero Member

Offline

Posts: 1006

Re: How to delete the logs of MAC address and Host Name changes ?

« Reply #3 on: January 03, 2010, 10:50:10 AM »

That's just one way. My point is that there are ways to find the answer even without logging. There is always something out there that you don't know.