Project 17: Capturing and Examining the Registry (30 pts.)
What is MRU (Most Recently Used)? - Magnet Forensics
Registry Analysis (Windows Forensic Analysis) Part 8
4n6k: Forensics Quickie: NTUSER.DAT Analysis (SANS CEIC 2015 Challenge #1 Write-Up)
NTUSER.DAT – Digital Forensics and Incident Response
Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs
Registry Forensics COEN 152 / ppt download
Windowsforensics
NTUSER.DAT.LOG2 file information | Download Scientific Diagram
UserAssistant - 4Discovery
SANS SIFT - NTUSER.DAT Forensics Challenge Walkthrough - YouTube
Digital forensics incident response by DragoN JAR - Issuu
NTUSER.DAT – Digital Forensics and Incident Response
Registry Analysis (Windows Forensic Analysis) Part 7
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1240/1*UNJGU3SpGyDrFYCw6ap_7w.png "Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium")
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
NTUSET.DAT file can be utilized in your digital forensic investigation
Forensic Investigation: Shellbags - Hacking Articles
923 words on Windows NTUSER.dat -
NTUSET.DAT file can be utilized in your digital forensic investigation
TryHackMe on Twitter: "Is your computer spying on you? We've released a FREE Windows Forensics room 🔎 🔵 Explore Windows Registry 🔵 Find Evidence of Execution 🔵 External Device Forensics Learn through
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1316/1*ntJTXm_32DZxsblInQ_sQg.png "Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium")
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1120/1*jFZucn_TOFNMhDu8o_cT_Q.png "Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium")
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/fit/c/224/224/1*8mwpFuvWHSzQGWQ9aGjxqQ.png "Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium")
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
Computer Account Forensic Artifact Extractor
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/804/1*Ctltg53HHrKEuHW5uaBUxQ.png "Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium")
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
