Extend MTF LogFile to a file in desktop - logfile

I am new to this simple thing,For my Windows Forensic Course, I extended $mft and $logFile to my folder in Desktop. I can see in the file properties that they are loaded. But when I visit the file, I can't see anything. I opened hidden files options, but it didn't work, what should I do?

I found my answer:
Click on Start
Select Control Panel
Select Folder Options
Select the View tab
Scroll down the Advanced setting
Uncheck Hide protected operating system files
Click OK

Related

File Explorer - Open in MS Edge?

Good day. I have a requirement to move from IE 11 to MS Edge on our systems, with all functionality as well. Currently, users will log into the computer, IE will launch with a local HTML file - User Dashboard, and then select which button on the page they want to use. Some of these buttons are linked to PDF files, some open File Explorer so that it opens their 'working directory' and/or file explorer to another directory on the machine for them to work in. They also run .lnk / .ps1 files. Works like a charm.
I was able to get about 80% of the functionality working using the Edge GPO template but now the only thing missing is opening file explorer for them to use the above situations. Currently when they click on the button on the page - file:/// - it opens up a new tab that displays the directory it is linked to. Unfortunately they are not able to run .lnk / .ps1 / .bat files. When selected, they open up in a new tab with the code displayed.
Is there anyway to run a program from Edge? I've already set the following in the GPO:
LGPO - Administrative Template -> MS Edge -> Allow launching of local files in internet explorer mode -> Enabled (default -> Not Configured)
LGPO - Administrative Template -> MS Edge ->< Configure Internet Explorer Integration -> Enabled -> IE Mode (default - Not Configured)
LGPO - Administrative Template -> MS Edge -> Open Local Files in Internet Explorer Mode file extensions allowed -> Enabled - "*" (default - Not Configured)
Hope this makes sense. Thanks in advance ...
Is there anyway to run a program from Edge?
Generally no, Edge used to be able to run epub files but even that feature is now removed.
Basically you can run any file type that is readable within Edge so txt or xml or htm or svg or mp4 etc.
When browsing local system in reader mode you can navigate up and down folders** local or on server and click any readable file type, however LNK files will behave in different ways.
LNK files that invoke an svg or txt or other Edge text safe readable object will open that readable bat cmd wsh ps1 file in a tab if necessary.
LNK files that call an executable such as notepad calc cmd or anything like a .hta runtime file count as not readable and are treated as requiring a security response, so will invoke an extra security step asking if you wish to download a copy.
You can download a copy of notepad.exe or cmd.exe but it will then run raw so runs outside EDGE and thus a copy of CMD.exe will simply open the console or a copy of notepad will open with a blank page. Only a copy of a stub.exe that does not need arguments would be useful.
** A zip folder normally operable in File Explorer counts as a downloadable security risk inside Edge.

In PyCharm, how can I save just the current file?

In PyCharm, Cmd-S saves all open files.
I want it to save only the current file on Cmd-S. I want to use Cmd-Shift-S to save all open files. How can I set that up?
Note: I have autosave turned off, like this:
Preferences > Appearance & Behavior > System Settings > uncheck "Save files on frame deactivation" and "Save files automatically if application is idle"
In PyCharm 4.5.4 there is a command called "Save Document". It saves only the current file.
Go to Preferences > Keymap
Search for "Save All" in the search box on the right. Find the "Save All" command, right-click on it, remove Cmd-S and add Cmd-Shift-S. It may warn you that this will remove Cmd-Shift-S from another command; click "Remove".
Search for "Save Document". Right-click on it and add the Cmd-S shortcut.
On Windows, use Ctrl-S instead of Cmd-S.
And to get SAVE DOCUMENT to appear in the FILE menu, you need to open:
settings->menus
toolbars->main menu->file
Hit the + option to add a command
Sarch for save document and select it.
You can move it around in the menu list once it's added.

How to view html output in Notepad++?

How do I view my Code output in Notepad++ as a webpage or something similiar?
I have built something but I can't find a button or something like that in Notepad to view it as a webpage or something similiar.
If it is a webpage written in html:
just go where you saved it and click it.
If it is in php:
You will need a web server, save the file in the www directory. and access it like this:
http://localhost/yourfile.php
Simply, save your file with the correct extension in this case html, then click run , in the run menu click launch in, (in whichever is your browser) in my case, chrome.And it should work(:
Add this plugin in Notepad++: Preview HTML but it opens only in IE
To setup Notepad++ for testing your markup or code there are a few things to consider.
When Notepad++ launches do you want a test document opened by default?
What language do you prefer the document to be opened as?
What browser do you wish to test your test file in?
Do we want a shortcut to open test in browser?
If you do not have your local environment setup to run server-side scripts you will be limited to what the browser supports.
In my example setup I will be using .php as my language. There are some variables, but I've chosen what I believe best suit my needs. I'm also using a windows machine.
Create a new file in C:\Program Files (x86)\Notepad++ (or wherever) as php.php (or whatever). This will be the document we keep open and will remain open so long as we never close it.
In Notepad++ go to Settings > Preferences > New Document
In the bottom left there is a drop-down. Select your language (php in my case).
Open php.php in Notepad++.
Go to Run > Modify Shortcut / Delete Command and locate your desired browser (note: this may not work as expected in some browsers i.e. Internet Explorer, go figure).
Create a custom shortcut so your document can be launched to test (unless you are happy with what is already setup).
This will effectively keep your default file open in Notepad++ every time it is launched in your preferred language and allow you to quickly test your markup.
Cntrl + Alt + Shift + I(Alphabet if you want to open in Internet explorer)
I hope this will work.

AgentRansack's file list provides right-click file popup menu like Explorer; how can I do this in my own apps?

if I right-click on a file name in the search results, it gives me the usual Explorer popup menu for a file, with options like Open, Edit, Properties, Share With, Send To. Just like what I get in Explorer itself. How did they do this? Can I do this in my own programs?
Check the How to host an IContextMenu series from oldnewthing. The seris not only deal with displaying the menu, but also shows how to handle different use cases such as property dialog, control or shift key down when menu item is selected, deal with context menu shell extensions, etc.

Capturing folder path from Windows Explorer

I would like to add to a Delphi application a way for the user to call Windows Explorer (possibly using something like ShellExecute, perhaps).
However, and this is where I need some help, please, the application would need to capture ^H^H^H^H^H^H read the folder path that the user navigates to while within Windows Explorer.
Is it possible to obtain this information from Windows Explorer?
[edit: If not possible, or unrealistic, my fallback plan is to provide a separate "Browse for folder" button, to allow the user to select the folder first, then they can launch the Window explorer afterwards].
Thanks for any advice.
PhilW.
I dont know your exact needs, but most likely, this is not the way to go. For details, Microsoft developer Raymond Chen has written a blog post about this. What you should do, I think, is to embed an explorer browser control in a custom form in your own application.
For letting a user browse to and select a folder, I use TOrtusShellBrowseFolder.
Ortus Shell Components
Can't you just use the TOpenDialog? From Delphi Help:
Description
TOpenDialog displays a modal Windows dialog box for selecting and opening files. The dialog does not appear at runtime until it is activated by a call to the Execute method. When the user clicks Open, the dialog closes and the selected file or files are stored in the Files property.
if OpenDialog1.Execute then
filename := OpenDialog1.FileName;

Resources