SRP Forensic Explorer Product Tips

Registry Hive and System Folder DIFF Utility for System Restore Points

For support professionals and forensic experts of system health and security, this is one software utility that does not need any explanation or justification.

Ever wondered what the unexpected changes to your Registry Hives and System Folders are after or even before performing a system restore operation?

SRP Forensic Explorer can take two Windows System Restore Points and display these changes:

1.  Software configuration changes

2.  System configuration changes

3.  Software installation/uninstallation

4.  Registry key privilege escalation (potentially by insider threats or intruded malware)

5.  Significant changes in registry hive sizes for possible keylogging activities