Saturday, August 11, 2012

Finding System's Last boot Time


Hello,

Todays my trick will help you in Forensic. Some time when our computer started by other and we want to find time of starting or this trick can also help in catching criminal activity performed on computer. There are some cmd commands for it.

I am giving here All Commands regarding XP, Vista, 7.

1.For Vista
systeminfo| find "System Boot Time"
2.For XP
systeminfo| find "System Up Time"
or
systeminfo | find "Up Time"
3.For Windows 7
systeminfo|find "Time:" (This will work in xp also)
or
Systeminfo | find /i  “boot time” 
or
Start Windows Task Manager Press (Alt+Ctrl+Del) in this window, click on the Performance tab.

Thats it!

No comments:

Post a Comment