Back To Shop

Hive Recon



Hive Recon extracts Registry hives from Windows hibernation and crash dump files, often extracting hives when other solutions have completely failed and extracting healthier (more intact) hives when other solutions have appeared to run successfully. Hive Recon can also extract hives from memory captures, provided they have already been converted to crash dump format. Hive Recon supports the extraction of volatile (in addition to stable) hives and incorporation of swap files from the same hibernation or crash dump session to extract even healthier Registry hives.

Arsenal Subscription Plans
Each subscription includes access to all the Arsenal tools (both those that exist now and released while the subscription is active), updates, and support!

Scroll to Top