±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35886
New Yesterday: 2 Visitors: 146

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Windows 7 SYSTEM reg file examination

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2, 3 
  

thefuf
Senior Member
 

Re: Windows 7 SYSTEM reg file examination

Post Posted: Apr 11, 17 00:12

If you have basic kernel debugging skills and you can boot a suspect image in a virtual machine, you can place a breakpoint on a registry key and clearly see what program (a userspace one or even a driver) is using (changing, creating, deleting) the key and what code is doing that. This may sound like an overkill, but it works.  
 
  

benfindlay
Senior Member
 

Re: Windows 7 SYSTEM reg file examination

Post Posted: Apr 11, 17 15:14

- jaclaz
Well, you actually asked for this Wink :
- MDCR

A well written program would at least have a tooltip popup, explaining WTF CMF is.

What is the meaning of the WTF acronym? Shocked

jaclaz


Off the top of my head:

Write To File
What's This For?
Wire Transfer Form
Whisky Tango Foxtrot
Welcome To Finland
World Trade Fair
World Taekwondo Federation
Worse Than Failure
Wednesday Thursday Friday
Wireless Telecommunication Facility
Warcraft Text File
Wikileaks Task Force (aka the CIA - I don't think I need to explain that acronym Cool )

Oh and Water Table Fluctuation

Personally, my money is on World Taekwondo Federation! Very Happy

Ben
_________________
Ben Findlay. BSc (Hons) MSc PgCLTHE FHEA MBCS MCSFS MIScT MInstISP
Course Leader BSc Computer and Digital Forensics
School of Science, Engineering and Design
Teesside University 
 

Page 3 of 3
Page Previous  1, 2, 3