Windows Registry Forensics


The Windows Registry Forensics learning path will enable you to understand the purpose and structure of the files that create the Windows Registry. You will learn to identify, extract and interpret important data from a live and non-live Windows Registry.




Our Price: $4


Size: 1.21 GB

What you’ll learn.

  • Structure of registry hives
  • Types of forensic evidence
  • Common forensics software and tools
  • Finding information on different hive files (NTUser.Dat, software, system, UsrClass.dat, AmCache)
  • Exporting and interpreting data

Who is this for?

  • Forensic investigators
  • Cybercrime analysts
  • Cybersecurity professionals
  • Law enforcement professionals
  • Anyone looking to learn more about Windows Registry Forensics