Latest Versions:   Arsenal Image Mounter 2.4.26  |   Hibernation Recon  |   Registry Recon  |   Purchase
Arm Yourself & Stay Informed!
Thank you! Your information has been saved and we will keep you informed of news and updates regarding Arsenal Recon and our products.

*required field

The information you submit here will be used to send you Arsenal Recon updates (for example - notification of new software, Insight posts, etc).

Registry Forensics Unleashed


The Microsoft Windows Registry is a complex ecosystem, in database form, containing valuable evidence related to hardware, software, and users on Windows computer systems. For far too long, digital forensics practitioners have merely scratched the Registry's surface by relying on outdated tools and techniques. As a student in Registry Forensics Unleashed, a one-day hands-on workshop, our students will learn how to dig deeper using a variety of powerful tools which include Registry Recon.

What's Covered:

Students will use tools that include Registry Recon, Registry Explorer, and RegRipper to dig into document, network, application, and storage device activity, answering compelling questions that digital forensics practitioners often have, such as:

  • What removable storage devices were attached over time?
  • When was malware "dropped?"
  • Which documents were accessed by each user?

Arsenal instructors will emphasize how analysis of these activities impacts both civil and criminal cases.


We have been students in many classes ourselves, and find that using our own evidence proves more engaging (and more relevant!) than sample evidence provided by instructors. Our students may use their evidence (ask us for instructions on how to perform preprocessing), evidence provided by the instructors, or both during hands-on exercises.


Registry Forensics Unleashed has been developed for all levels of technical personnel involved in digital forensics, incident response, and information security.


Please contact Arsenal's sales team regarding our current training schedule. Registry Forensics Unleashed can also be held at properly equipped customer locations.

Cost per Person:

$750 (Full day training with a one-year subscription to all Arsenal tools)