-
-
Replying to @bartblaze
@bartblaze I particularly don't like RegShot. I just mine procmon for registry artifacts1 reply 0 retweets 0 likes -
Replying to @bartblaze
@bartblaze Procmon through Noriben. RegShot misses too many critical operations (e.g. key created then deleted, modified then reverted).1 reply 0 retweets 0 likes -
Replying to @bartblaze
@bartblaze Only problem with Procmon is that when it shows data written to the registry, it'll only show the first X bytes then a "..."1 reply 0 retweets 0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.