±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36783
New Yesterday: 0 Visitors: 142

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Useful registry key, search strings

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

packys
Member
 

Re: Useful registry key, search strings

Post Posted: Mar 31, 06 23:50

Hello All,

I came across this today, and just had to share.

A new tool called Open in Regedit
www.petri.co.il/open_i..._in_ie.htm

Highlight the full path of a registry key, right click, select the tool from the drop-down, and it automatically opens. Fantastic for registry research!

Regards,

Christine
www.e-evidence.info  
 
  

keydet89
Senior Member
 

Re: Useful registry key, search strings

Post Posted: Apr 01, 06 03:44

packsys,

I'm not sure I follow...how is this new tool "fantastic for Registry research"? Seriously...I don't follow.

Harlan  
 
  

christop007
Member
 

Re: Useful registry key, search strings

Post Posted: Apr 02, 06 00:19

hi guys

can i just ask does this key

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars

clear itself each time the person logs off or do they have to manually delete the item for it to disapear.

christop007  
 
  

keydet89
Senior Member
 

Re: Useful registry key, search strings

Post Posted: Apr 02, 06 01:55

christop,

Try it, and let us know.

Export the contents of the key, the log off. Log back in again, and then export the contents of the key again. Are the two files the same?

Harlan  
 
  

packys
Member
 

Re: Useful registry key, search strings

Post Posted: Apr 03, 06 20:48

Harlan,

In response to your question, I would have to say that any tool that is designed to save me time in my research is worth having.

When I come across references to the values in particular registry keys, these values appearing at the end of a rather long path, rather than open the registry viewer, and expand each folder until I find the value that I am seeking, I would much rather highlight, right-click, and be immediately taken down the full path to the value.

Christine
www.e-evidence.info  
 

Page 2 of 2
Page Previous  1, 2