Role of Windows Registry Forensics in Digital Forensics Investigation

Mohsin Ali

Abstract

The research paper covers one of the most important aspect of the digital forensics investigation “Registry Forensics” as there are several components that are necessary for carrying out digital forensics investigation, one cannot overall the windows registry. The research paper is basically divided into two segments, where the first segment fully explains what registry is, how it works, and what important information stored in it. Moreover, the research paper covers the aspect of anti-forensics elements that are incorporated by different cyber criminals in order to wipe the traces of fraudulent activities, and finally the author has concluded the research paper by highlighting the importance of windows registry in digital forensics investigation.