1

I'm reading this article, in the Deleted Recovery Example it has the following picture, Figure 8 shows an example of a data recovery error by a popular registry forensics tool

enter image description here

I have two questions

  1. Does anyone know what software this is?
  2. I've tried to create a scheduled task and deleted it, but there's no *.regtrans-ms files in c:\windows\system32\config\txr:

enter image description here

daisy
  • 1,735
  • 3
  • 25
  • 39

1 Answers1

1

That's Registry Explorer/RECmd from -- https://ericzimmerman.github.io/#!index.md

atdre
  • 18,885
  • 6
  • 58
  • 107