Scanning Standalone Registry Files for Recent Activity

By default OSForensics will search for known windows folders when scanning for registry data. If you have a set of registry files you can scan them by placing them in the root directory of a disk that does not have Windows installed on it, eg a thumb drive. You can then select this drive in OsForensics as the target of the scan and it will search the root directory for the registry files.

For a tutorial on how to scan for recent activity, please see the video below.  

Recent Activity: A demonstration of scanning a system for evidence of recent activity, such as accessed websites, USB drives, wireless networks, and recent downloads.

(Right-click to download, MP4 format, 5MB)
(Note: The user interface for the recent activity section has changed since this video was made but the collection process remains largely the same)