2413: AccessData’s Registry Viewer Lab

Thursday, June 24, 2004
10:00am – 11:30am
Presenter: Dustin Hurlbut

PRESENTATION DESCRIPTION

Using the Registry Viewer to Examine and Document Evidentiary Registry Data

• Registry Overview

• Hands on Tour of the Microsoft Registry as it relates to forensic needs

• Decrypting Passwords in the Registry

• Locating User ID Information

• Viewing the Most Recently Used documents

• Generating a Case Report from the Registry

PRESENTER BIO

Dustin Hurlbut is a Senior Instructor for AccessData. He conducts training in AccessData products and related computer forensic topics. Dustin is retired from the Whatcom County Sheriff’s Office, Bellingham, Washington, with over 30 years of law enforcement experience. He has conducted and consulted on criminal and civil computer forensic examinations since 1993. Dustin is a Certified Forensic Computer Examiner with the International Association of Computer Investigative Specialists (IACIS). He has taught various related classes for IACIS for over ten years as well as classes for Federal, State, and local jurisdictions.

Close This Window