This is my delima. I am using Registry Viewer on an investigation. I have found a Key in a hive and I only want to add the one key. SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\COMDLG32\OPENSAVEPIDMRU\JPG……KEY 6
I use the Define Summary Report and select the one file and add it. When I select "preview report", there is only the one key…..GREAT! When I generate a report, it is no where to be found in the newly generated report.
I called FTK and they did not know how to add this one file to the report. Is anyone proficient with the reports in Registry Viewer?
Why not just use RegRipper?
Why not just use RegRipper?
Definitely! Plus you can easily copy the desired text from the RegRipper report into your final report.
In the alternative of that, grab a screen capture of the relevant key.
Never heard of Regripper but will look into it. Is it easy to use?
Are you guys using it for Criminal Forensics?
Miket065, when you do the screen capture, what are you doing with it or how are you entering that into the report?
Miket065, when you do the screen capture, what are you doing with it or how are you entering that into the report?
I use PrintKey 2000. It's free and I just insert the .jpg into my report.
http//
Are you guys using it for Criminal Forensics?
Yes, criminal forensics.
Have you used Printkey in Win7?
I have.
