• Home
  • Products
  • Training
  • Support
  • About Us
  • Forum
  • Sign In

Registry Viewer

Discover
  • Find files faster
  • Search within files
  • Search for E-mails
  • Recover deleted files
  • Uncover User Activity
  • Collect system information
  • Password recovery
  • Hidden Disk Areas - HPA/DCO
  • Volume Shadow Copy
  • Web Browser
Identify
  • Verify and match files
  • Find misnamed files
  • Compare drive signatures
  • Timeline viewer
  • File viewer
  • Memory viewer
  • Binary String Extraction
  • Email viewer
  • Registry viewer
  • File system browser
  • Raw disk viewer
  • Thumbnail cache viewer
  • SQLite database browser
  • ESE database browser
  • Prefetch viewer
  • $UsnJrnl viewer
  • Plist viewer
  • Event Log Viewer
  • Web Server Log Viewer
Manage
  • Case management
  • Generate reports
  • Storage device management
  • Drive Imaging
  • Cloud Drive Imaging
  • Cloud Account Imaging
  • Rebuild RAID arrays
  • Portability
  • Secure case logging
  • Support

OSForensics™ includes a built-in registry viewer for analyzing the contents of Windows registry hive files. It can be opened from the Start tab in OSForensics or will open and automatically navigate to the selected key when choosing the "Open registry file" option from a recent activity scan.

The registry viewer does not use Windows API calls so it offers the following benefits over RegEdit;

  • Last edit time and date for keys
  • Easily open offline registry hives (eg those stored on a portable drive)
  • Fast searching and ability to go directly to a known key location
  • Bypasses windows permission enforced on some parts of the registry
  • Can display registry locations that might be hidden due to actions of malicious software / rootkits
  • Easy exporting to text of a single key, all of the subkeys or the entire registry file
  • Can add keys and their values to the current case

OSForensics registry viewer

Home
Discover Identify Manage
Contact Us Legal Disclaimer
Products
OSForensics OSForensics Bootable (USB Flash Drive) Rainbow Tables - 3TB hard disk
Training
Online Training Course Certification Exam - Online Triage Exam - Online Face-to-Face Classes 2024 Events Calendar
Support
Video Demonstrations FAQs and Tutorials OSForensics Forums Australian Head Office North American Branch

Copyright © 2024 PassMark™ Software