External Drive Serial Number

http://www.forensicfocus.com/Forums/viewtopic/t=11250/

USB Forensics Volume Serial Number

Here's a good article to help you determine the Volume Serial Numbers that have connected to a computer.

https://hatsoffsecurity.com/2014/06/08/usb-forensics-pt-4-volume-serial-number/

Can I Reuse my Windows License Key?

http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_install/can-i-reuse-windows-7-professional-key/42ce75df-ceae-4f9f-acb9-e232b52a2576?auth=1

How to Find the Windows Product Key

After entering a product key when installing Windows, Microsoft doesn't show it again. We know the product key is stored in the registry at:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId

 

The problem is the product key has to be converted for us to compare it to the original product key on the Windows software package.

This solution will allow you to obtain the product key by creating and executing VB script.
 

1.  Copy and paste the following script into WordPad or NotePad.

(if NotePad removes the hard returns, you may want to use WordPad)
 

Set WshShell = CreateObject("WScript.Shell")
MsgBox ConvertToKey(WshShell.RegRead("HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId"))

 

Function ConvertToKey(Key)
Const KeyOffset = 52
i = 28
Chars = "BCDFGHJKMPQRTVWXY2346789"
Do
Cur = 0
x = 14
Do
Cur = Cur * 256
Cur = Key(x + KeyOffset) + Cur
Key(x + KeyOffset) = (Cur \ 24) And 255
Cur = Cur Mod 24
x = x -1
Loop While x >= 0
i = i -1
KeyOutput = Mid(Chars, Cur + 1, 1) & KeyOutput
If (((29 - i) Mod 6) = 0) And (i <> -1) Then
i = i -1
KeyOutput = "-" & KeyOutput
End If
Loop While i >= 0
ConvertToKey = KeyOutput
End Function

 

2. Save the document as plain text with a .vbs extension. (very important!)

3. After saving the .vbs script, double click to run or execute the script.

(The product key will display in a pop-up box.)

http://www.howtogeek.com/206329/how-to-find-your-lost-windows-or-office-product-keys/

 

How to Over-ride the settings on your Honeywell Thermostat

https://www.youtube.com/watch?v=ofenS8mOJDs

Data Runs and Signed Integers

After many difficult hours trying to understand this concept, I summarized it in a way I believe will be helpful to others.

Data runs are signed numbers, thus they can take both positive and negative values.  A negative value is determined by the most significant bit (MSB) which is the leftmost bit after a hex number has been converted to binary.  If the MSB is 1, that bit’s value is negative.  If the MSB is 0, the value is positive (or actually zero). 

The offset for the first run will be relative to the start of the file system (sector 0 offset 0), but all subsequent offsets (jump values) will be relative to the previous offset.  The polarity of the jump value ( + or - ) will determine the specific location of the fragment or data run on the disk.  The result is that the disk read and write head may jump forward and backwards to the different file fragments or data runs.  See the image below.

The chart below gives the full explanation.

Best ways to Format an External Drive for Windows and Mac

http://www.cnet.com/how-to/the-best-ways-to-format-an-external-drive-for-windows-and-mac/

FrostWire Forensics

http://articles.forensicfocus.com/2012/07/19/forensic-examination-of-frostwire-version-5/

Windows Registry Forensics Resource

This might be useful.

http://travisaltman.com/location-of-forensic-evidence-in-the-registry/

Mapping Network Drives from the Windows Command Prompt

http://www.howtogeek.com/118452/how-to-map-network-drives-from-the-command-prompt-in-windows/

Do I Mind that Android Knows Where I Am?

Our smart phones know where we are.  Is that okay?  I'm trying to decide.  I must admit that I like the location apps and services that are available, but it's almost shocking when I look at my location history and realize this phone keeps track of me AT ALL TIMES.

This article tells the entire story for Android and iOS.

http://lifehacker.com/psa-your-phone-logs-everywhere-you-go-heres-how-to-t-1486085759

For a quick look at your location history on your Android device, follow this link. You will need to log in with your Google credentials.

https://maps.google.com/locationhistory

To see your location history on your iOS device, look here.  You will need your Apple ID and password to log in.

http://www.iclarified.com/36198/how-to-view-the-location-history-of-your-iphone

Social Media Search Engine

This site searches social media and does a passable job:

http://whitepagesus.net/

Erasing an iPad and Dealing with an Unknown Restrictions Passcode

When attempting to erase and reset an iPad (3rd Generation), I was asked for a 4-digit restrictions passcode.  I don't recall ever seeing this term, but Apple wanted it before it would let me erase the device.  I suppose it makes it difficult for thieves to wipe and distribute stolen iPads.  Here is the solution:

1. Sign into icloud.com
2. Click on the "find my iPad" tab
3. Click "all devices" on top of the page
4. Click on the device for which you lost your passcode
5. These options will display: "play sound" "lost mode" and "erase iPad"
6. Choose "erase iPad" and it will begin to wipe the device
7. Choose Remove iPad to allow it to be activated and used again

This will also work for iPhones.

Finding Personal Information about Someone

These sites lead to pay sources, but without paying anything, they provide a wealth of information such as:

Full Name
Age
Names of Family Members
Places Lived
Addresses
Phone Numbers
Associated Businesses

(click Search Full Info for even more information)

http://www.advancedbackgroundchecks.com/

Another site:

http://www.publicrecordsnow.com/

Reset Windows 7 or Windows 8 Password

After I upgraded Windows 8 to 8.1, my password failed to work.  I used this to get back in:

http://www.youtube.com/watch?v=Wb7GP-zwh_E

Another source:

http://pcsupport.about.com/od/windows-8/a/reset-password-windows-8.htm

Solid State Drives - Part 1 of 6

http://www.dfinews.com/articles/2013/04/solid-state-drives-part-1

Windows XP Support Ends April 8, 2014

After 12 years, Microsoft is ending support for Windows XP. What does this mean to you?

If you have a Windows XP computer, you should consider upgrading your operating system or upgrading the computer altogether. There are steps you can take to make XP computers safer, but I don't recommend them in most circumstances.

For more information:  http://windows.microsoft.com/en-us/windows/end-support-help

How to Quickly Create a Copy of a Table using Transact-SQL

http://technet.microsoft.com/en-us/magazine/dd401720.aspx

Three ways to take a screenshot on a Mac

This is old information, but I can never seem to remember it:

http://www.cnet.com/how-to/three-ways-to-take-a-screenshot-on-a-mac/

Dictation.IO

You have to use Chrome for this, but this site will dictate your speech and does a pretty good job.

https://dictation.io/