SetRegTime Anti-Forensics Tool

By Chad Tilbury on August 21, 2012 in Incident Response, Windows Registry — Leave a comment
New anti-forensics tool SetRegTime can change Registry last write times. | http://t.co/atWsf4sE via @
@chadtilbury
Chad Tilbury

 

Harlan Carvey discusses the ramifications of Windows Registry anti-forensics on his blog:  http://windowsir.blogspot.com/2012/08/setregtime.html.

You can find SetRegTime here: http://code.google.com/p/mft2csv/wiki/SetRegTime

No Comments

Be the first to start the conversation.

Leave a Reply