October 29, 2016
Categorised in: Computer Forensic & Cyber Applications
Windows systems use the Registry to store system configuration and usage details in what are called “keys.”
Registry files on Windows 95 and 98 systems are located in the Windows installation folder and are named “system.dat” and “user.dat.”
The Registry on Windows NT/2000/XP is comprised of several hive files located in “%systemroot%\system32\config” and a hive file named “ntuser.dat” for each user account.