1

I'm reading this article, in the Deleted Recovery Example it has the following picture, Figure 8 shows an example of a data recovery error by a popular registry forensics tool

enter image description here

I have two questions

  1. Does anyone know what software this is?
  2. I've tried to create a scheduled task and deleted it, but there's no *.regtrans-ms files in c:\windows\system32\config\txr:

enter image description here

1 Answer 1

1

That's Registry Explorer/RECmd from -- https://ericzimmerman.github.io/#!index.md

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .