Usually we will use LiveView or VFC to "boot up" the evidence files acquired from suspect's computer or laptop. What if his/her OS is Win10? Win10 has two account types. One is Local User Account, and the other is Live ID Account.  For VFC to bypass Local User Account is just a piece of cake(Sorry,not including Win10~). Let's see if VFC could bypass the password of Live ID Account. Unfortunately VFC failed to bypass and the error messges is as below:

Now I show you another option "Lazesoft". Let's use it to take care of Win10 Local User Account first. I use Lazesoft to create a bootable Live CD/ISO so as to take care of Win10 logon password. Of course you should change boot priority first to boot from disc without fail.

Let's proceed to reset Win10 logon password.

Now we'd like to reset the password of a local user account "Rick".

Good job~ It works~

Now the password is "empty" for this local user account "Rick". So we could log in and conduct a Live forensic.

What about Live ID account? The LiveID account credential "may" exist in this computer/laptop after user logging in.

Unfortunately either Lazesoft or Elcomsoft failed to reset the password of a Live ID account.

What about domain user account? If this computer/laptop is a member of a Active Directory domain, Lazesoft could not reset  password of a domain user account. You should use Elcomsoft possword recovery to handle domain user account password.

最新文章

  1. BPM协同平台解决方案分享
  2. 配置Chrome支持本地（file协议）的AJAX请求
  3. [LeetCode] Zigzag Iterator 之字形迭代器
  4. 解决Win7下VC6.0插入ActiveX控件对话框为空的问题
  5. dreamweaver中用正则表达式查找替换批量删除 tppabs标签的方法
  6. java MemCachedClient遍历memcache中所有的key
  7. [WPF疑难]如何禁用WPF窗口的系统菜单（SystemMenu)
  8. cygwin中vim的使用方法
  9. 判断json数据是否包含key
  10. CDQ分治与整体二分小结
  11. linux 命令mkdir、cd
  12. GMA Round 1
  13. string函数详解(配案例)
  14. 学习python的几种模块
  15. mysql知识点拾遗梳理
  16. 从mysql主从复制到微信开源的phxsql
  17. PHP冒泡排序算法
  18. es2015箭头函数的this
  19. shell 批量替换内容
  20. WPF(C#)与MATLAB混合编程

热门文章

  1. Handwritten Parsers & Lexers in Go （翻译）
  2. Linux下防火墙配置
  3. 2、公司部门的组成 - CEO之公司管理经验谈
  4. 解决SVN造成的桌面图标问号
  5. 使用 mysql PDO 防止sql注入
  6. MySQL ALTER TABLE: ALTER vs CHANGE vs MODIFY COLUMN
  7. NOTIC: Invalid argument supplied for foreach()
  8. select超链接跳转A
  9. windows系统操作
  10. Appium Mac 命令行安装