Unfortunately, existing digital forensics tools for processing the Windows registry are limited in functionality and difficult to use.

Age progression is most often used as a forensics tool by law enforcement.

Zdziarski demonstrates how to do so using his own forensics tools (see video below), but common jailbreaks like purplera1n or redsn0w can be used to the same ends.

Streamline the process of testing digital forensics tools.

Provide unbiased standards for testing digital forensics tools.

Under CFTT, focus groups composed of law enforcement officials define the requirements for various types of digital forensics tools.

This will require the use of forensics tools, log analysis, clean lab and dirty lab environments and possible communication with Law Enforcement or other outside entities.

Although there are forensics tools that extract metadata from a variety of file formats, the quality and quantity of metadata varies depending on the file type.

Attacks against forensics tools directly has also been called computer forensics.

Registry Recon was the first (and is currently the only) digital forensics tool to rebuild Registries from both active and previous installations of Windows.