Harlan Carvey, in Windows Registry Forensics, 2011 Introduction WhatInStartup: (supersedes currently available but obsolete tool, StartupRun (Strun), ).
When I sat down to write this book, I was aware that for most folks, providing spreadsheets, tables, and lists of Registry keys and values would not be an entirely effective means of communicating and sharing information about Registry analysis.
In fact, after writing the first edition of Windows Forensic Analysis (Syngress Publishing, published in 2007, a.k.a., WFA), it was pretty clear to me that listing Registry keys and files wasn't as effective as providing examples of Registry analysis, and of how all of these could be used together. #Prodiscover basic download 64 bit windows