| Author Name | |
| Matt Nelson | |
| Submission Title | |
| Bluetooth Personal Area Network (PAN) Service Artifcacts (Broadcom Widcomm) | |
| Artifact or Program Version | |
| Broadcom Widcomm | |
| Artifact Description | |
| These artifacts contain information you can glean from the registry pertaining to network/PAN services available for the Broadcom Widcomm stack. Further investigation of these artifacts can reveal what was available to other systems. A follow-up post will detail the systems connected. Extracted from the registry of a Windows 7 x64 system with a Broadcom 2070 Bluetooth radio device. |
|
| Registry Keys | |
| -= Primary registry key =- HKEY_LOCAL_MACHINE\SOFTWARE\ -= Bluetooth Services Definitions =- [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Bluetooth Serial Port” “SecurityId”=dword:00000001 “UUID”=dword:00001101 “GUID”=”{00001101-0000-1000- “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Establish a virtual serial port connection with a remote Bluetooth device. The connection can then be used by any application that supports the COM port number assigned.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Network Access” “SecurityId”=dword:00000002 “UUID”=dword:00001102 “ModemInstalled”=dword: “GUID”=”{00001102-0000-1000- “RasConnection”=” “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Establish a network connection to a remote Bluetooth device. The connection may provide access to an external network or the Internet.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 “UserName”=”" “Password”=”" “Autoconnect”=dword:00000001 “EnableAutoReconnect”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Dial-up Networking” “SecurityId”=dword:00000003 “UUID”=dword:00001103 “ShowWizard”=dword:00000000 “ModemInstalled”=dword: “GUID”=”{00001103-0000-1000- “RasConnection”=” “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Connect to the Internet using a Bluetooth-enabled telephone, modem or other remote Bluetooth device that offers the Dial-up Networking service.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”PIM Item Transfer” “SecurityId”=dword:00000005 “UUID”=dword:00001105 “GUID”=”{00001105-0000-1000- “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Exchange business cards with a remote Bluetooth device. Send Personal Information Manager (PIM) items such as calendar items, contacts, notes and messages to a remote Bluetooth device.” “InstallOnDemand”=dword: “OPPType”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”File Transfer” “SecurityId”=dword:00000006 “UUID”=dword:00001106 “GUID”=”{00001106-0000-1000- “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Browse another Bluetooth device’s Public Folder or send and receive files to and from another Bluetooth device.” “InstallOnDemand”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Fax” “SecurityId”=dword:0000000b “UUID”=dword:00001111 “ModemInstalled”=dword: “GUID”=”{00001111-0000-1000- “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Use the fax capabilities of a Bluetooth telephone, modem or other remote Bluetooth device that offers the fax service.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “GUID”=”{00001104-0000-1000- “Name”=”PIM Synchronization” “SecurityId”=dword:00000004 “UUID”=dword:00001104 “AcceptBusinessCards”=dword: “AcceptCalendarItems”=dword: “AcceptEmailMessages”=dword: “AcceptNotes”=dword:00000000 “SaveInPIM”=dword:00000001 “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Synchronize the Personal Information Manager (PIM) database on this computer with the PIM database on a remote Bluetooth device.” “InstallOnDemand”=dword: “SyncBusinessCards”=dword: “SyncCalendarItems”=dword: “SyncEmailMessages”=dword: “SyncNotes”=dword:00000000 “PreferredProfile”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000008 “UUID”=dword:00001108 “Authentication”=dword: “Name”=”Headset” “Encryption”=dword:00000001 “GUID”=”{00001108-0000-1000- “Description”=”Establish an audio connection between this computer and a Bluetooth headset or other remote Bluetooth device acting as a headset. When connected, the remote device can be used as a replacement for this computer’s local microphone and speakers for voice calls (PC telephony) or voice recognition applications.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:0000000c “UUID”=dword:00001112 “Authentication”=dword: “Name”=”Audio Gateway” “Encryption”=dword:00000001 “GUID”=”{00001112-0000-1000- “Description”=”Establish an audio connection between this computer and a Bluetooth-enabled phone or other remote Bluetooth device as an Audio Gateway. When connected, this computer replaces the remote device’s speakers and microphone.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000011 “UUID”=dword:00001126 “Authentication”=dword: “Name”=”Printer” “Encryption”=dword:00000001 “GUID”=”{00001126-0000-1000- “Description”=”Add a Bluetooth-enabled printer to your list of available printers. This printer can then be used as if it was physically connected to this computer.” “InstallOnDemand”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “SecurityID”=dword:00000012 “UUID”=dword:00001124 “Authentication”=dword: “Name”=”Human Interface Device” “Encryption”=dword:00000000 “GUID”=”{00001124-0000-1000- “Description”=”Use a Bluetooth enabled mouse, keyboard or other interface device.” “InstallOnDemand”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Image Push Client” “SecurityId”=dword:00000014 “UUID”=dword:0000111b “GUID”=”{0000111B-0000-1000- “Authorization”=dword:00000000 “Authentication”=dword: “Encryption”=dword:00000001 “Description”=”Send image files to another Bluetooth device.” “InstallOnDemand”=dword: “PutImageToPrinterTimeout”= [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000008 “UUID”=dword:0000110b “Authentication”=dword: “Name”=”Stereo Audio” “Encryption”=dword:00000001 “GUID”=”{0000110B-0000-1000- “Description”=”Establish an audio connection between this computer and a Bluetooth stereo headphone or speakers. When connected, the remote device replaces this computer’s speakers.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Name”=”Hands-free Audio” “Encryption”=dword:00000001 “GUID”=”{0000111E-0000-1000- “Description”=”Establish an audio connection between this computer and a Bluetooth headset or other remote Bluetooth device acting as a headset. When connected, the remote device can be used as a replacement for this computer’s local microphone and speakers for voice calls (PC telephony) or voice recognition applications.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000008 “UUID”=dword:0000111e “Authentication”=dword: [HKEY_LOCAL_MACHINE\SOFTWARE\ “UUID”=dword:0000110a “SecurityID”=dword:0000000c “Auto”=dword:00000001 “Authorization”=dword:00000000 “Authentication”=dword: “Name”=”Audio Sink” “Encryption”=dword:00000001 “GUID”=”{0000110A-0000-1000- “Description”=”Connect to the source of an audio stream like media player.” “InstallOnDemand”=dword: “ComPortNumber”=dword:00000000 “UserInstalled”=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000006 “UUID”=dword:00001304 “Authentication”=dword: “Name”=”Video Sink” “Encryption”=dword:00000000 “GUID”=”{00001304-0000-1000- [HKEY_LOCAL_MACHINE\SOFTWARE\ “Authorization”=dword:00000000 “Auto”=dword:00000001 “SecurityID”=dword:00000006 “UUID”=dword:00001303 “Authentication”=dword: “Name”=”Video Source” “Encryption”=dword:00000000 “GUID”=”{00001303-0000-1000- |
|
↧
Bluetooth Personal Area Network (PAN) Service Artifcacts (Broadcom Widcomm)
↧