Back To Shop

HBIN Recon



HBIN Recon identifies and parses Windows Registry hive bins (hbins) from any input. Hive bins are essentially the building blocks of Registry hives. Examples of HBIN Recon input include healthy Registry hives, fragmented hives, hive transaction logs, Transactional Registry (TxR) files, compressed hive bins which can be found in swap files and elsewhere, hibernation slack (first processed by Hibernation Recon), and unallocated space. HBIN Recon is a surgical tool which is extremely useful in both testing and verification related to Registry data, as well as uncovering valuable data not accessible using other methods.

Arsenal Subscription Plans
Each subscription includes access to all the Arsenal tools (both those that exist now and released while the subscription is active), updates, and support!

Scroll to Top