Wireless Networks and the Windows Registry - Just where has your computer been?

Windows keeps track of everything you do on the system, what you have connected tothe computer and what you have used on the system. Knowing where to look for this information and what it tells you is one of the great challenges incident responders and analysts have when looking at computers. This paper documents the registry remnants that remain from both hardware connections (NIC's) being inserted into the computer, as well as information within the registry regarding the networks that the computer has connected too in the past for both Windows XP and Windows Vista systems.