Registry

The Windows registry is a hierarchical database with keys and values about configuration settings on the operating system. This could be used for both malicious- and defensive purposes.

A collection of 2 posts:

Windows Forensics 1 banner
Windows Forensics 1 - TryHackMe

13 min read

In this walkthrough we will demonstrate the steps necessary to complete the Windows Forensics 1 room on TryHackMe.

writeup forensics thm registry windows
Speedcurve Performance Analytics
Blue Teaming Notes

12 min read

Members only

A big page with notes about all general blue/defensive techniques - all from forensics to malware analysis.

notes registry forensics memory malware members