Professional Documents
Culture Documents
Forensics Windowsregistry Cheat Sheet 161221024032 PDF
Forensics Windowsregistry Cheat Sheet 161221024032 PDF
\Software\Microsoft\Windows\Curre
Recent Docs
ntVersion\Explorer\RecentDocs
Word FileMRU
10 Excel
PowerPoint
Office Recent Docs \Software\Microsoft\
11
12
14
Time UTC Every Key has Last Write Time TimeStamps Program Executed RUNPATH
\CurrentControlSet\Control\Comput
Computer Name
erName\ComputerName
ControlSet00x
CurrentControlSet
\Select\Current
\CurrentControlSet\Services\Tcpip\
Network interfaces
Parameters\Interfaces
\CurrentControlSet\Control\TimeZo
SYSTEM neInformation
\CurrentControlSet\Control\TimeZo
Time Zone Information
neInformation