registry hive slack space artifact detector — free browser tool | fatcousin

drop registry hive binary or slack extraction output · detect artifacts hidden in registry hive slack space · identify residual data from deleted keys in hive free cells · surface historical registry content from slack · runs locally

registry inputs

drop hive binary · slack extraction csv

or click

Select file

NTUSER.DAT · SOFTWARE · SYSTEM · SAM · SECURITY · Registry Explorer slack export csv

drop registry hive (.dat) · slack extraction csv from Registry Explorer or similar

ready