You are on page 1of 1

Registry

Registry :

System Path

Name host computer \SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName

Time zone used \System\CurrentControlSet\Control\TimeZoneInformation

System last shutdown \SYSTEM\ControlSet001\Control\Windows\ShutdownTime

Computer IP ControlSet001\Services\Tcpip\Parameters\Interfaces

DHCP ControlSet001\Services\Tcpip\Parameters\Interfaces

RDP SYSTEM\ControlSet###\Control\TerminalServer

GUID SYSTEM\ControlSet###\Services\Tcpip\Parameters\Interfaces\{GUID}\ *

Softwear Path

Operating System(OS) -
\SOFTWARE\Microsoft\Windows NT\CurrentVersion
version

LastLoggedOnUser -
\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\LastLoggedOnUser
LastLoggedOnUSERSID

Applications are
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths
installed

NTUDER.DAT Path

Run SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Asalah Mohammed

You might also like