[Day 1] 2. Important File Locations

Outlook Folder and Extension:

Data Recovery from SSDs:

Data recovery from failed SSDs is possible but more challenging due to the way SSDs handle data storage and wear leveling. Specialized tools and techniques may be required.

Partition IDs in Linux:

Mounting a File System as Read-Only:

Command:
```
mount -t auto -o ro /dev/sdb2 /test
```
- By default, mount is read-write unless specified otherwise.

Checking the Sudoers List:

Viewing User History:

Login Details:

File:
```
/var/log/auth.log
```
Additional files may include those starting with
```
auth.log
```
followed by other extensions.
You can check the last login activity in
```
lastlog
```
file present in
```
/var/log/
```
, open it using the
```
lastlog
```
command.
Use
```
/var/log/wtmp
```
for detailed last login activity (
```
last -f wtmp
```
).

OS Information:

APT Package Installation History:

Hostname:

Locate vs Find Commands:

Windows Registry Storage:

The Windows registry is stored in binary files, primarily located in
```
C:\Windows\System32\Config
```
.

Contents of the

.ssh

Directory:

IP Address and DNS Logs: