The Windows Registry as a forensic resource

The Windows Registry contains a wealth of information that can prove to be very valuable to the forensic investigator. The key to accessing this information is to know where the information exists within not only the file system, but also within the structure of the Registry itself.