Chapter 8: The Registry Structure

Understand the terms keys, values, and hive files, as well as understand how logical keys and values are mapped to and derived from physical registry hive files. The Windows registry is a complex database of configuration settings for the operating system, programs, and users. The database data is stored in several files called hive files. When mounted, the registry is rendered into a logical structure that can be addressed, called, edited, and so forth. The Windows operating system provides a utility called regedit, by which the registry can be viewed, searched, and edited.
Master It From the Run window, type in regedit.exe and press Enter. In the resulting UI, what is the left pane called and what is the right ...

Get Mastering Windows Network Forensics and Investigation, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.