(240)-343-2585

Please see attachment

Hardware/Software Setup Required

Windows computer

Access to cmd.exe and regedit32.exe

Problem Description

Examine a Windows Registry to view keys, subkeys, and values

Outcome

Prepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation

Validation/Evaluation

· Open a command line window on a Windows computer

· At the prompt, type “regedit32” and press enter to open the Windows Registry

· Explore the Registry keys, subkeys, and values taking note of the type of information contained in each

· Prepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation