Boot.ini File
The Boot.Ini file
Where can
it be found?
Located
at the root of a system, often is C:\Boot.ini
This is
only for Windows XP and Windows Server 2003
What does
it contain?
Information
about both the boot loader and the operating system being used
As we can
see from above: The
timeout is the time that it takes to boot
Under.
Why it
this useful?
May show
multiple boot options that are available to the user, including multiple OS
systems on different partitions.
Example: Suspect has been found as source of an
attack through their IP address. They have used remote software to access a
computer, which has given information about their operating system along with
the IP address. The information shows that Windows XP has been used, yet the
defendant maintains that they have always used Windows 7. A simple search of
the Boot.ini file would find that Windows XP is on the system.
May be
the case that the file has been deleted and as such will still be available,
but harder to find.
Comments
Post a Comment