RegistryHivesUser
User Related Registry hives
- 9 paths
- Per-user data
- Version 1
- Eric Zimmerman / Mark Hallman
Paths on disk
9 paths
References
5 links
- sans.org/security-resources/posters/windows-forensic-analysis/170/download(opens in new tab)
- youtube.com/watch?v=OBp6SHgSSZg(opens in new tab)
- secjuice.com/windows-forensics-artifacts-2/(opens in new tab)
- sans.org/reading-room/whitepapers/forensics/windows-shellbag-forensics-in-depth-34545(opens in new tab)
- cyberforensicator.com/2019/02/03/shellbags-forensics-directory-viewing-preferences/(opens in new tab)