Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
Brendan Dolan-Gavitt Georgia Institute of Technology - SANS
SHOW LESS
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Registry Forensics<br />
Tools<br />
• RegLookup<br />
• Fast, robust registry<br />
parser<br />
• Parse::Win32Registry<br />
• Lower level perl module<br />
• Good for rolling your<br />
own tools<br />
• RegRipper<br />
• Undisputed king <strong>of</strong><br />
registry analysis<br />
• Produces reports <strong>of</strong><br />
forensic info
Change language