FEATURE ARTICLE

Windows 7 Registry Forensics: Part 1

By John J. Barbara

While the Windows Registry is forensically important, frequently it is not captured during the triage of a live system. Similarly, it is often overlooked during post-mortem examinations.