Scanning Standalone Registry Files for Recent Activity
By default OSForensics will search for known windows folders when scanning for registry data. If you have a set of registry files you can scan them by placing them in the root directory of a disk that does not have Windows installed on it, eg a thumb drive. You can then select this drive in OsForensics as the target of the scan and it will search the root directory for the registry files.
For a tutorial on how to scan for recent activity, please see the video below.
|Recent Activity: A demonstration of scanning a system for evidence of recent activity, such as accessed websites, USB drives, wireless networks, and recent downloads.
(Right-click to download, MP4 format, 5MB)