IT Forensics – Windows

Forensic analysis of Windows WLAN artefacts – Tracing wireless network connections

Windows stores a great deal of information about known WLAN networks and their usage. Depending on the system and configuration, SSIDs, profiles, configuration data and other artefacts may provide clues about previous wireless network connections.

Enquire without obligation

A professional analysis is never carried out in isolation. Only by correlating the findings with network profiles, registry artefacts, event logs, DNS artefacts and other digital traces is it possible to arrive at a reliable technical assessment.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is carried out exclusively on a forensic copy or a forensic image. The original evidence remains unchanged and is stored in a manner that preserves its evidential integrity.

Our services

We analyse WLAN profiles, configuration data and other wireless network artefacts. All results are correlated with other Windows artefacts and documented in a traceable manner.

Typical areas of application

Incident Response
Reconstruction of network connections
Analysis of mobile devices
Analysis of user activity
Employment law proceedings
Expert reports for the courts

This is how the analysis works

Once a forensic image has been created, the relevant WLAN artefacts are analysed and technically assessed alongside other digital evidence.

Why are WLAN artefacts important?

WLAN artefacts can provide clues about known wireless networks and their usage. However, their significance only becomes apparent once all relevant digital traces have been analysed as a whole.

Frequently Asked Questions

What information do WLAN artefacts contain?+
Depending on the data available, this may include, amongst other things, network names (SSID), profiles and configuration information.
Can previous WLAN connections be traced?+
Depending on the system and the artefacts available, there may be relevant information.
Is the original system being examined?+
No. Only a forensic copy or forensic image is analysed.
Are WLAN artefacts alone sufficient for an expert report?+
No. They are always analysed alongside other Windows artefacts.

LanCologne – Windows Forensics in Cologne

Do you require a professional analysis of Windows WLAN artefacts or other Windows components? LanCologne can assist you with the forensic preservation of digital evidence and the objective analysis of complex Windows systems.

Get in touch now