Feb 2017
13 Mon
14 Tue
15 Wed
16 Thu 09:00 AM – 06:00 PM IST
17 Fri 09:00 AM – 06:00 PM IST
18 Sat
19 Sun
HK
Hemant Kumar
@xcodehack
Registry Forensic
Submitted Nov 28, 2016
Technical level:
Intermediate
I have developed a tool that first fetches current registry hives from system and old registry hives(enumerating Volume shadows copies or Regback folder) and then compare the changes made in registry for any malware related incident. I have used multithreaded,multiprocessing, dynamic html geenration concept heavily in this project.
Outline
The RegDiffer tool first fetches current registry hives from system and old registry hives(enumerating Volume shadows copies or Regback folder) and then compare the changes made in registry for any malware related incident.
Requirements
Projector
Speaker bio
Senior Forensic Analayst, Cyber Incident Response Team, Accenture
{{ gettext('Login to leave a comment') }}
{{ gettext('Post a comment…') }}{{ errorMsg }}
{{ gettext('No comments posted yet') }}