Pre-Installation
- Pre-install Setup Guide – Windows 7
- Pre-Install Setup Guide
- Existing SQL Server Installation
- Permissions To be SET prior to SQL Server Installations
- Elevate Current User to SQL Server Admin
- Adding Debug Permissions To User
- Disable DEP and Enable PAE
- Windows Defender Removal in XP and Vista
- SQLExpress Installation
- Using Management Studio for SQL Server 2008
Post-Installation
Performance Enhancement
IVault Installation
Resolutions
ILookPI Features:
- Data capture, analysis, investigation and dissemination
- The most advanced imaging solution available
- An easy-to-use interface
- Five built-in, fast and thorough search engines
- Built-in development environment
- Built-in file viewers for hundreds of file types
- The leading salvage engine
- Extremely fast hash engines and automated data reduction techniques
- Built-in e-mail store processing, searching and viewing
- Filesystem, file and e-mail recovery
- Multiple categorization features
- Registry viewing and searching
- Virus/Trojan search and identification
- VMware virtual disk production from devices or images
- Context dictionary production for password cracking
- IVault data store preparation and production
- Support for all common archive file formats
- Deconstruction of evidentially useful file types
- Sorting, grouping and filtering of files and e-mail.
- Advanced analysis functions
- Advanced MS Outlook e-mail recovery
- Illicit image and movie detection
- Password protected file detection
- File password cracking
What Our Customers Are Saying:
"Elliot Thanks. You have made it possible for an entire generation of forensic investigators to exist and have a tool that we could not have obtained in any other way."
- Federal Computer
Forensics Agent
Disable DEP and Enable PAE
Disable DEP and Enable PAE in the software level of XP and VISTA using these commands:
VISTA at a terminal cmd line execute these commands:
bcdedit /set {current} nx AlwaysOff
bcdedit /set {current} pae ForceEnable
XP and Server 03 by using a boot.ini switch, edit the boot.ini either in windows sytem access or on disk:
/noexecute=alwaysoff /pae
The /PAE switch is critical in either vista or xp.
TEST the settings after a cold boot using both of the blue commands below:
To determine the current DEP hardware support policy:
At the command prompt, type the following command, and then press ENTER:
wmic OS Get DataExecutionPrevention_Available
If the output is “TRUE,” hardware-enforced DEP is available. It is reporting the setting to windows and it may or may not be contravened by bios settings. Only a Mobo or bios guide will usually reveal the settings.
At the command prompt, type the following command, and then press ENTER:
wmic OS Get DataExecutionPrevention_SupportPolicy
The value returned will be 0, 1, 2 or 3. This value corresponds to one of the DEP support policies that are described below:
Data Execution Prevention: 2
Support Policy: OptIn (default configuration)
Property Value: Only Windows system components and services have DEP applied
Data Execution Prevention: 3
Support Policy: OptOut
Property Value: DEP is enabled for all processes. Administrators can manually create a list of specific applications which do not have DEP applied
Data Execution Prevention: 1
Support Policy: AlwaysOn
Property Value: DEP is enabled for all processes
Data Execution Prevention: 0
Support Policy: AlwaysOff
Property Value: DEP is not enabled for any processes
After a COLD BOOT of the computer, if DEP’s supportpolicy property is set to 0, then DEP has been disabled in software. This will typically override for Windows the effect of hardware DEP but NOT in all cases.