25.12.2014 Views

Analysis and Evaluation of the Windows Event Log - Bill Buchanan

Analysis and Evaluation of the Windows Event Log - Bill Buchanan

Analysis and Evaluation of the Windows Event Log - Bill Buchanan

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

CO42019 – Project 4<br />

The screenshot on <strong>the</strong> left shows <strong>the</strong> original hex value (3C 1F 2A 47), <strong>the</strong> screenshot on <strong>the</strong> right shows <strong>the</strong> first set <strong>of</strong> hex values has<br />

been increased by 1 (3D 1F 2A 47). It is noted that <strong>the</strong> 32 bit time has increased by 1 second.<br />

Fur<strong>the</strong>r investigation is required to calculate a hex value from a given time & date.<br />

Project – Week 5.doc<br />

Page 4 <strong>of</strong> 9

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!