Windows Registry Forensics Part 2
摘要
In Chapter 5 , you were provided a general introduction to the Windows Registry and to specific keys that are important to Windows forensics. You were also introduced to several tools for performing Windows forensics. In this chapter, we will expand on that knowledge.