Professional Documents
Culture Documents
Registry :
System Path
Computer IP ControlSet001\Services\Tcpip\Parameters\Interfaces
DHCP ControlSet001\Services\Tcpip\Parameters\Interfaces
RDP SYSTEM\ControlSet###\Control\TerminalServer
GUID SYSTEM\ControlSet###\Services\Tcpip\Parameters\Interfaces\{GUID}\ *
Softwear Path
Operating System(OS) -
\SOFTWARE\Microsoft\Windows NT\CurrentVersion
version
LastLoggedOnUser -
\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\LastLoggedOnUser
LastLoggedOnUSERSID
Applications are
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths
installed
NTUDER.DAT Path
Run SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Asalah Mohammed