Registry Browser is a forensic software application. It’s designed specifically for examining the Windows Registry. Users of Registry Browser are typically in the computer forensics or incidence response industry or anyone with a strong interest in Windows Registry Forensics. Registry Browser is currently at version 3. Earlier versions date back to 1999.
REGEDIT.EXE can be used to examine a live registry. Registry Browser is different because it opens the individual hives files which reside on disk. It then re-assembles their contents into a complete Windows Registry. This approach allows for the searching and reporting of the entire registry at once (instead of on a hive-by-hive basis). A modern Windows Registry contains a minimum of 7 hive files and this number increases with the creation of new users.
Registry Browser is traditionally run from a Windows platform. However, it is also available below for Mac OSX and available by request for Linux. Please direct any requests to registrybrowser@lockandcode.com.
Registry Browser’s interface (see Screenshots below) will be familiar to users of REGEDIT.EXE. It facilitates the browsing of the keys and values which comprise the registry. Additionally, Registry Browser provides several modules to delve deeper into key areas of the registry where necessary.
Download your copy of Registry Browser today. Also, don’t forget to register on the mailing list to be notified of updates.
Windows Binaries
