SetRegTime Anti-Forensics Tool

By Chad Tilbury on August 21, 2012 in Incident Response, Windows Registry — Leave a comment
New anti-forensics tool SetRegTime can change Registry last write times. | http://t.co/atWsf4sE via @
August 21, 2012 2:31 pm via FlipboardReplyRetweetFavorite
@chadtilbury
Chad Tilbury

 

Harlan Carvey discusses the ramifications of Windows Registry anti-forensics on his blog:  http://windowsir.blogspot.com/2012/08/setregtime.html.

You can find SetRegTime here: http://code.google.com/p/mft2csv/wiki/SetRegTime

Related posts:

  1. PFIC: Paraben’s Forensic Innovations Conference 2011
  2. Windows Registry: Application Compatibility Cache
  3. De-mystifying Defrag: Identifying When Defrag Has Been Used for Anti-Forensics (Part 1 – Windows XP)

No Comments

Be the first to start the conversation.

Leave a Reply