Arsenal Recon Registry Recon

Arsenal Recon Registry Recon

Featured
264 3

DFIR Tools

Developer
License Type
Paid
Forensic Utilities - Windows
Registry
Registry Recon is not just another Registry parser. We developed powerful new methods to parse Registry data so that Registries which have existed on a Windows system over time can be rebuilt, providing unique insight into how Registry data has changed over time. Registry Recon provides access to an enormous volume of Registry data which has been effectively deleted, whether that deletion occurred due to benign system activity, malfeasance by a user, or even re-imaging by IT personnel.

Attachments

  • File Description
    File Size
    File Type
    Downloads
  • Registry Recon Alpha v2.3.0.0068 - BCD Hive Parsing from SANS Blake Memory Capture
    956 KB
  • Arsenal Recon One Pager
    1 MB
  • Registry Recon Quick Start Guide v2017.1
    2 MB

User comments

There are no user comments for this listing.
Already have an account? or Create an account