The Windows Registry as a forensic resource [An article from: Digital Investigation]

This digital document is a journal article from Digital Investigation, published by Elsevier in . The article is delivered in HTML format and is available in your Amazon.com Media Library immediately after purchase. You can view it with any web browser.

Description:
The Windows Registry contains a wealth of information that can prove to be very valuable to the forensic investigator. The key to accessing this information is to know where the information exists within not only the file system, but also within the structure of the Registry itself.