Other Tools
Other tools are available for registry viewing and reporting. Harlan Carvey’s registry-parsing Perl scripts are available free from his Reg Ripper project site on Google Code (http://code.google.com/p/regripperplugins/downloads/list/), and additional scripts written by the forensic community are available online as well (http://code.google.com/p/winforensicaanalysis/downloads/list/ ). A Windows GUI is also now included in the Reg Ripper download package, which means you can run it in a standard Windows environment or drop into Perl and do it from the command line. If the command line is your thing, you’ll first need to install Perl for Windows, which is available from http://www.activestate.com. Perl is open source, and once you’ve ...
Get Mastering Windows Network Forensics and Investigation, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
