Assignment:
Hardware/Software Setup Required
Windows computer
Access to cmd.exe and regedit32.exe
Problem Description
Examine a Windows Registry to view keys, subkeys, and values
Outcome
Prepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation
Validation/Evaluation
• Open a command line window on a Windows computer
• At the prompt, type "regedit32" and press enter to open the Windows Registry
• Explore the Registry keys, subkeys, and values taking note of the type of information contained in each
• Prepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation