1

I'm reading this article, in the Deleted Recovery Example it has the following picture, Figure 8 shows an example of a data recovery error by a popular registry forensics tool

enter image description here

I have two questions

  1. Does anyone know what software this is?
  2. I've tried to create a scheduled task and deleted it, but there's no *.regtrans-ms files in c:\windows\system32\config\txr:

enter image description here

1

That's Registry Explorer/RECmd from -- https://ericzimmerman.github.io/#!index.md

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.