by Mark Spencer | Oct 10, 2018 | Digital Forensics, Windows Registry
New Versions of HiveRecon and HbinRecon Launched 0 Comments Written by Mark Spencer October 10, 2018 What does HiveRecon do? HiveRecon extracts Registry hives from Windows hibernation and crash dump files, often extracting hives when other solutions have...
by Mark Spencer | Feb 27, 2018 | Digital Forensics, Windows Registry
Unique Windows Registry data in Fast Boot hibernation and hive transaction logs 0 Comments Mark Spencer February 27, 2018 I was asked to take a recent flurry of Tweets and turn them into an Insights post with more detail. So, here goes! We have spent some...
