What people are saying - Write a reviewReview: Windows Registry Forensics: Advanced Digital Forensic Analysis of the Windows RegistryUser Review - Dan - GoodreadsNot as in depth as I was hoping. It's a great introduction to Registry forensics, but most of this won't be new for experienced examiners. I was hoping for a more comprehensive reference guide to lots ... Read full review Related books
Common terms and phrasesacquired image application artifacts batch file beneath this key binary data boot browser bytes chapter command computer forensic configuration contents created default entries examination example extract file system firewall forensic analysis hashes illustrated in Figure incident response indications installed Internet KB article key LastWrite key or value keys and values launched LM hash located look maintained malware Microsoft Developer Network Microsoft Support MRU list Network NTLM NTUSER.dat hive operating system OphCrack output parse password Perl persistence mechanism plug-in plug-ins file Registry analysis Registry hive files Registry keys Registry values RegRipper RegRipper plug-in rip.pl Rob Lee Run key script shell extensions Software hive specific structure System hive System Restore Points there’s tion updated USB device user account User Profile user’s hive UserAssist key value names versions of Windows Windows Explorer Windows Registry Windows systems Windows Vista Windows XP Windows XP system Bibliographic information |