%windir%\SoftwareDistribution\Datastore

%windir%\SoftwareDistribution\Datastore\Logs
%windir%\Security\Database
%allusersprofile%\
%SystemRoot%\System32\GroupPolicy\Machine\
%SystemRoot%\System32\GroupPolicy\User\
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\DSA Database
File
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\Database Log
Files Path
%windir%\Ntds

Files
%windir%\SoftwareDistribution\Datastore\Logs
Edb*.jrs
Edb.chk
Tmp.edb

%windir%\Security\Database
*.edb
*.sdb
*.log
*.chk
*.jrs
*.xml
*.csv
*.cmtx

%allusersprofile%\
NTUser.pol

%SystemRoot%\System32\GroupPolicy\Machine\
%SystemRoot%\System32\GroupPolicy\User\
Registry.pol

%windir%\Ntds
Ntds.dit

Ntds.pat

%windir%\Ntds

EDB*.log
Res*.log
Edb*.jrs
Ntds.pat

%windir%\Ntfrs

edb.chk in the %windir%\Ntfrs\jet\sys folder

Ntfrs.jdb in the %windir%\Ntfrs\jet folder
*.log in the %windir%\Ntfrs\jet\log folder

%systemroot%\System32\DHCP
*.mdb
*.pat
*.log
*.chk
*.edb