drop registry hive exports from multiple control sets · detect values present in backup hive but absent in current · identify registry keys deleted between snapshots · surface rollback evidence · runs locally
hive exports
drop control set registry exports (.reg / csv)
or click
ControlSet001 · ControlSet002 · LastKnownGood · include LastWriteTime column in csv when available
drop registry hive exports from multiple control sets (.reg or csv)