HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\HiveList On the next page, click Download.ĭouble-click the " AccessData Registry Viewer.exe" file and install the software with the default options.Ĭlick Start. In the "Current Releases" section, expand the " Registry Viewer" section, as shown below. On the "FTK Imager Lite version 3.1.1" line, click Download.Įnter your email address if you are prompted to. In the "Current Releases" section, expand the " FTK Imager" section, as shown below. In the " Product Downloads" section, click " Digital Forensics". On the upper right of the page, point to Resources. Once the USB drive has been recognized, eject it and remove it. If you are working in S214, there are some thumbdrives available for loan in tie wooden closet. Connect it to the Windows machine you are using. Plug in a USB thumbdrive or other device. The instructions below assume you are using Windows 7. Project 17: Capturing and Examining the Registry (30 pts.) Project 17: Capturing and Examining the Registry (30 pts.) What You NeedĪ Windows machine, real or virtual.
0 kommentar(er)
