Windows Registry

The Windows Registry is used in various versions of Microsoft Windows to hold a number of configuration settings that affect how Windows and programs running under Windows run. The location and format differs by version of Windows.

Windows 9x

 * Forensics Wiki: Windows 9x Registry File (CREG)

Windows NT

 * Forensics Wiki: Windows NT Registry File (REGF)

Links

 * Forensic Wiki: Windows Registry
 * Yet Another Registry Utility (yaru)