Chapter 5

Registry Analysis

Chapter Outline

Information in this Chapter

• Registry Analysis

Introduction

The Registry is a key component of every Windows system, and as Windows systems have become more complex, progressing from Windows 2000 to XP and on to Windows 7, the value of the Registry as a source of forensic data has likewise increased. As such, what is available ...

Get Windows Forensic Analysis Toolkit, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.