KARIM ASHRAF SPACE.
Ctrlk
  • Who Am I ?
  • WRITEUPS
    • What about Practice in Cyber Security?
    • Dark Side of VSCode
    • What about Cy-nix Machine?
    • Cyberdefenders Labs
    • Lets Defend
      • Incident Responder Path
        • Cybersecurity Incident Handling Guide
        • Incident Response on Windows
        • Incident Response on Linux
        • Hacked Web Server Analysis
        • Log Analysis with Sysmon
        • Forensic Acquisition and Triage
        • Memory Forensics
        • Registry Forensics
          • Introduction to Windows Registry Forensics
          • Acquiring Registry Hives
          • Regedit and Registry Explorer
          • System, Users and Network Information
          • Shellbags
          • Shimcache
          • Amcache
          • Recent Files
          • Dialogue Boxes MRU
        • Event Log Analysis
        • Browser Forensics
        • GTFOBins
        • Hunting AD Attacks
        • Writing a Report on Security Incident
        • How to Prepare a Cyber Crisis Management Pla
        • Advanced Event Log Analysis
        • USB Forensics
        • Windows Disk Forensics
    • BTLO LABS
    • The Complete Active Directory Security Handbook
    • Windows Privilege Escalation
    • Advanced Log Analysis
    • Methods for Stealing Password in Browser
  • The Ultimate Active Directory CheatSheet
  • COURSES SUMMARY
    • TCM SEC
    • The SecOps Group
    • Cybrary
  • TIPS&TRICKS
    • Windows Shorcuts Arrow Remover
    • Kali KEX
    • Intel TurboBoost
    • Pentest_Copilot
    • Ferdium
    • Youtube Adblock_Bybass
    • Burb-Bambdas
    • Burb Customizer
    • BetterFox
Powered by GitBook
On this page
  1. WRITEUPS
  2. Lets Defend
  3. Incident Responder Path

Registry Forensics

Introduction to Windows Registry ForensicsAcquiring Registry HivesRegedit and Registry ExplorerSystem, Users and Network InformationShellbagsShimcacheAmcacheRecent FilesDialogue Boxes MRU
PreviousMemory Analysis ProceduresNextIntroduction to Windows Registry Forensics