> For the complete documentation index, see [llms.txt](https://psmths.gitbook.io/windows-forensics/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts.md).

# Registry Artifacts

- [Amcache.hve](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/amcache.md)
- [Background Activity Montitor](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/bam-dam.md)
- [Image File Execution Options Registry Keys](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/image-file-execution-options.md)
- [System Resource Usage Monitor (SRUM)](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/srum-db.md)
- [Run/RunOnce Registry Keys](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/reg-run-runonce.md)
- [Tracing Registry Keys](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/tracing-keys.md)
- [Services Registry Keys](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/registry-services.md)
- [Select Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/select.md)
- [CurrentVersion Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/current-version.md)
- [ComputerName Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/computer-name.md)
- [Interfaces Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/interfaces.md)
- [NetworkCards Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/network-cards.md)
- [TimeZoneInformation Registry Key](https://psmths.gitbook.io/windows-forensics/artifacts-by-type/registry-artifacts/time-zone-information.md)