Directory
Search for:
Videos
Videos
Курс: Windows Registry Forensics. Чтобы вернуться, нажмите здесь.
- What is the Registry and why is it important
- Structure of the Windows Registry
- Viewing the Registry with RegEdit
- Software needed to examine the Registry
- Locating the registry files within the Windows file system
- Locating and interpreting the registry values
- Recent Docs
- Typed URLs
- UserAssist
- Recent Apps
- Run and Run Once
- ComDig32 Subkey
- Typed Paths Subkey
- Microsoft Office applications and the MRU subkey
- Windows search function and the WordWheel query
- SAM hive file
- Security Identifiers
- User Accounts (RIDS)
- Password Hashes
- Other Types of User Accounts
- Software File Subkeys of Interest
- Network List Subkey
- Connected Devices
- System File Subkeys of Interest
- USB Device Forensics
- AppCompat Cache and Background Activities Monitor
- Shellbags
- MuiCache and Managed By App Sub-Keys
- AmCache Hive File SubKeys of Interest
- AmCache Parser.exe Demo