-
Posted to
Input Formats
by
hg363
on
11-17-2009, 9:47 AM
Good afternoon to all forum members. Please could some one provide me with the correct SQL string that could be used with LP to interrogate Active Directory and find out how many times a user has changed his or her passowrd, thankyou Mr Ghelani UK
-
Posted to
Input Formats
by
hg363
on
10-28-2009, 12:12 PM
Hi to all forum members. This question was inspired by Trojan.Spambot. Here is a description of the Trojan.
Trojan.SpamBot is a Trojan that sends out mass spam e-mails, consuming and congesting network resources.
This Trojan was detected on a PC on our network and an anti spy ware application informed us that the Trojan was ...
-
Posted to
Input Formats
by
hg363
on
10-27-2009, 3:22 PM
Hi again to all forum members. Please can some one kindly assist me with this one.
Having run this query
string_is = " -i:ADS -objClass:user -o:DATAGRID " & """ SELECT cn, lastLogon FROM 'Domain Name' where sAMAccountName='HG363'"""
The output is as follows
Ghelani ...
-
Posted to
Output Targets
by
hg363
on
10-27-2009, 3:02 PM
Hi to all forum members. Please can some one kindly help me with this slight problem.
I am running a query using LP and it works fine, except that the data when written to a CSV file is all on one line. Here is the query
output_path = "'C:\WINDOWS\Temp\joop\" & user_name & "\Group Membership.csv'"
Set ...
-
Posted to
Input Formats
by
hg363
on
10-23-2009, 9:51 AM
Sorry my apologies, I mean is there a script that could interrogate the standard event log files on the MS Windows XP PC and pull out the data I require?
-
Posted to
Input Formats
by
hg363
on
10-22-2009, 5:50 PM
Hi to all forum members.
Is there an SQL script in existance or can one be configured that when executed with Log Parser would show which printers a client printed to from a MS Windows XP Pro PC?
And if this is possible can the script then be inflated to show what dates the print jobs were sent to the printers and if possible the ...
-
Posted to
Input Formats
by
hg363
on
10-22-2009, 10:45 AM
Hi Kanwal. Once again thnak you for your prompt reply.
Would you possess any valuable examples to perform PC forensics on Windows PC's. If so would you kindly share some with me?
-
Posted to
Input Formats
by
hg363
on
10-19-2009, 9:32 AM
Hi I have this script which I slightly adapted from MS.
Set objLogParser = CreateObject("MSUtil.LogQuery")
Set objInputFormat = CreateObject("MSUtil.LogQuery.FileSystemInputFormat")
objInputFormat.Recurse = 0
Set objOutputFormat = CreateObject("MSUtil.LogQuery.DataGridOutputFormat")
strQuery = "SELECT Name, ...
-
Posted to
Output Targets
by
hg363
on
07-17-2009, 11:46 AM
Hi please kindly advise. I am running this query
Set objinputFormat = CreateObject("MSUtil.LogQuery.TEXTLINEInputFormat")Set objOutputFormat = CreateObject("MSUtil.LogQuery.TSVOutputFormat")objOutputFormat.fileMode = 0
objOutputFormat.headers = "Auto"
strQuery = "select top 1 text INTO ...
-
Posted to
Input Formats
by
hg363
on
07-10-2009, 6:03 PM
Hi look thank you very much indeed for taking the time to show me. May I please ask more question as I very new to LP, how would one pass the TEXTLINE found by LP to this script. So weather I use this method
objLogParser.ExecuteBatch strQuery, objInputFormat, objOutputFormat
or this method
objShell.run ("LogParser " & ...