Registry Forensics

Introduction to Windows Registry ForensicsAcquiring Registry HivesRegedit and Registry ExplorerSystem, Users and Network InformationShellbagsShimcacheAmcacheRecent FilesDialogue Boxes MRU
PreviousMemory Analysis ProceduresNextIntroduction to Windows Registry Forensics