Notifications
Clear all
Topic starter
06/02/2013 5:49 am
Hi guys im doing an investigation on an image of a hard drive for university coursework and i need to access the registry to view some data but cant because the viewer in ftk i greyed out i have downloaded the demo version from accessdata but how to work my way around it i dont know can someone give some help
os windows xp
thru - virtual machine
FTK 1.50 full version from uni
06/02/2013 6:18 am
Use another viewer, or use RegRipper.
06/02/2013 11:43 am
Do you have AD Registry Viewer installed? Is it from the same era as the version of FTK you are using? Because you are using a demo version of FTK, I would say that some functionality is reduced and part of that may be the ability to launch Registry Viewer from within FTK.
So to cut to the chase, follow keydet's advice.