Windows Forensic Handbook

Ctrlk

🗄️Registry Artifacts

Amcache.hve Background Activity Montitor Image File Execution Options Registry Keys System Resource Usage Monitor (SRUM)Run/RunOnce Registry Keys Tracing Registry Keys Services Registry Keys Select Registry Key CurrentVersion Registry Key ComputerName Registry Key Interfaces Registry Key NetworkCards Registry Key TimeZoneInformation Registry Key

Last updated 2 years ago