Registry Forensics

Microsoft Windows is one of the most used operating systems to date. It is widely used by home and enterprise users. This makes this platform a major target for threat actors. So, it is important for cybersecurity professionals to understand how to perform forensics investigations on Windows systems. In this course we will be discussing the Windows registry and the valuable artifacts and information it stores.

1. 1Lessons9 lessons

   1. 1.1Introduction to Windows Registry ForensicsPreview6 min
   2. 1.2Acquiring Registry Hives1 question · 7 min
   3. 1.3Regedit and Registry Explorer5 min
   4. 1.4System, Users and Network Information5 min
   5. 1.5Shellbags5 min
   6. 1.6Shimcache1 question · 6 min
   7. 1.7Amcache6 min
   8. 1.8Recent Files5 min
   9. 1.9Dialogue Boxes MRU5 min