Registry Decoder was initially funded by the National Institute of Justice in late 2009 in the form of a research and development . Since the expiration of that grant, it has continued to be developed by in order to add new features and perform more complex analysis. The main developers of Registry Decoder are and .
Features:
- Hive Browsing
- Hive Searching
- Plug-in System
- Differencing of Registry Files
- Automated Reporting
Supported Evidence Types:
- Raw (dd) images
- Raw partition images
- Individual Registry Files
- Databases created by the online acquisition component
