Using AccessData’s Registry Viewer
AccessData (http://www.accessdata.com/) produces several quality computer forensic applications, including Forensic Toolkit (FTK), Password Recovery Toolkit (PRTK), and Registry Viewer. Whereas EnCase views the registry from within its primary forensic tool interface, AccessData handles the registry in a different manner, providing a separate viewer known as Registry Viewer. As with anything else, Registry Viewer has advantages and disadvantages, depending on your perspective or preferences. Our intent here is to provide you with options and information and let your preferences and resources guide you.
AccessData’s Registry Viewer is an excellent registry-viewing tool and is part of its FTK suite of tools. However, ...
Get Mastering Windows Network Forensics and Investigation, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
