In a forensic examination of a computer

we are trying to parse some information about wireless stored in:
HKLM\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfac es\{GUID}

I know that under the GUID subkey, there are binary registry values named
Static#0000, Static#0001, etc. (depending on the number of listed SSID) which
correspond to the respective list of SSIDs in the Preferred Networks box in
Wireless Network Connection configuration. The registry value contains the
SSID name in binary form.

Is there any information on parsing the rest of the binary data?

Anybody?

"scot_w" wrote:

> we are trying to parse some information about wireless stored in:
> HKLM\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfac es\{GUID}
>
> I know that under the GUID subkey, there are binary registry values named
> Static#0000, Static#0001, etc. (depending on the number of listed SSID) which
> correspond to the respective list of SSIDs in the Preferred Networks box in
> Wireless Network Connection configuration. The registry value contains the
> SSID name in binary form.
>
> Is there any information on parsing the rest of the binary data?