Computer Forensics Tools & Techniques Catalog

Entering tool / technique information

You have selected to enter information for a Windows Registry Analysis tool / technique. If this is correct, please enter the requested information in the fields below. If this is incorrect, please select the correct functionality/tool type from the menu bar on the left.
(Note: some tools perform multiple forensic functions. Such tools will need to be submitted multiple times, once for each function they support.)

Contact information

Your name:
Your email address:

General tool / technique information

Tool / technique name:
Version:
Release date:
URL to tool / technique description:
Developer name:
Developer website URL:
Available test reports  (e.g., report title + where or from whom it may be obtained; use semicolons for multiple reports):

Detailed tool / technique information

Select the parameter values that best describe the tool / technique. Ctrl-click (Cmd-click for Macs) to select multiple values for a parameter.

Forensic Functionality:Windows Registry Analysis
Technical Parameters: Tool host OS / runtime environment: Input data type(s): Automated hive extraction and parsing: Registry rebuilding: Deleted key recovery: Key and value instance display: Pre-built reports: