Friday, October 22, 2010

Updated Windows Registry and Mac resources & Jad's Software....updated

As several sites have rightfully pointed out....Accessdata has made a huge jump ahead with their recent release of FTK Imager v3.0.  (not to mention FTK 3.2 and their most recent "Volatile tab.")   Just finished testing it today by mounting physical images and using VFC to virtually boot XP and Win7 systems.  Flawless!    While wandering around their site (actually looking for updated RSR files to add to their most recent Registry Viewer version), I stumbled across two additional documents that I believe are very worthy of a good read - or at least printing out as a permanent reference.

Registry Quick Find Chart - a very recently updated 34-page reference documenting Registry locations for the standard 5 Registry files.  The document has a few new columns in the document - one which lists what versions of Windows the reference pertains to (ie: XP, Vista or Win7) and a second column that states when the Registry reference is updated (immediately, when document opened, at logon...)    This document would also be great starting reference to initiate further research on Registry locations and extractable artifacts.  D/L it....know it....print it and keep it handy!

Mac System Artifacts - another reference document which provides 7 pages of Mac Artifact locations.  With FTK's amazing ability to parse out the Mac OS (including Plists), this document is another one to print off.  Updated in 2010.

Jad has also updated three of his applications:
Internet Evidence Finder (IEF) - updated to v3.6 to handle recent updates to Facebook Live chat.  Commercial - Cdn $49.00; Free for Law Enforcement.
FChat - updated to v1.20.    Commercial - Cdn $29.99
FJF - Facebook JPG finder - updated to v1.2.1.  Currently free for use.

9 comments:

  1. Thanks for the blogs.............
    Best Fingerprinting Services
    Our process for electronic fingerprinting uses high quality equipment, called fingerprint live scanner., Our process is virtually error-free, avoiding smudged readings and/or delivery errors often associated with the ink processing method.
    http://www.fingerprintexpert.in/

    ReplyDelete
  2. windows registry software is very effective and useful.
    dddl software download

    ReplyDelete
  3. windows registry software are very powerful for windows security. thanks for this post.
    software windows crack

    ReplyDelete
  4. windows registry software and mac software are really useful and very nice.
    crack software serial

    ReplyDelete
  5. Thanks for share of windows registry software is very nice and useful.
    pc software download app

    ReplyDelete
  6. this is very useful information for updated windows registry.
    Portable Software Download

    ReplyDelete
  7. I learned your posting! its really informative and helpful.
    acdsee pro 8 keygen

    ReplyDelete