Web: https://www.reddit.com/r/computerforensics/comments/s0wkbg/trying_to_find_a_way_to_see_when_a_user_account/

Jan. 10, 2022, 10:29 p.m. | /u/Pubh12

Computer Forensics reddit.com

So the HDD , which ran XP, doesn’t boot anymore. I can access the files however.

I’m trying to find a when a specific account was created on this drive. It was created from the original admin account , which also was deleted and replaced later on.

. The user account files of the first admin account were saved , but nothing of the account that I’m looking for.

The guest account is still the same guest account with files …

computerforensics first now user

Head of Information Security

@ Canny | Remote

Information Technology Specialist (INFOSEC)

@ U.S. Securities & Exchange Commission | Washington, D.C.

Information Security Manager - $90K-$180K - MANAG002176

@ Sound Transit | Seattle, WA

Sr. Software Security Architect

@ SAS | Remote

Senior Incident Responder

@ CipherTechs, Inc. | Remote

Data Security DevOps Engineer Senior/Intermediate

@ University of Michigan - ITS | Ann Arbor, MI