nps-2009-domexusers
- This is an NTFS file system of computer running Windows XP containing two user accounts. Over a course of several days, an experimenter playing the role of two users exchanged instant messages and emails with a third user that resided on a separate system. The two accounts received, edited and saved office document files as well as various media files. Some of these files were then deleted. Email and instant messenger conversations were saved locally on the system. The accounts also visited web pages for news and webmail. Details of the precise method by which this disk image were prepared can be found in another publication. This image has been redacted with a special redaction tool that removes the instructions from the Microsoft Windows executables but leaves behind the strings. This allows analysis of the DLLs but prevents the image from being used to run Windows without a license, which believe is sufficient redaction for the purpose of distributing the disk image under the "fair use" provisions of the US Copyright Act.nps-2009-realistic
Acquisition Date: 2008-11-0402:09:57.
 |
 |
 |