Hello can you please help me with my digital forensics lab questions. ALSO CAN YOU PROVIDE SCREENSHOTS ON REGISTRYVIEWER TO SHOW THE ANSWER PLEASE!!!

1. The ntuser.dat file contains information on which of the following? (choose all that apply.):

a. Drive letter designations

b. Personalized desktop settings

c. PID key

d. MRU devices.

2. Password decryption tools often need which of the following to retrieve user passwords? (choose all that apply.)

a. SYSTEM hive

b. SAM hive

c. ntuser.dat file

d. Enum folder

3. The ntuser.dat file is in which of the following paths?

a. C:/Windows/System32/Config

b. C:/Documents and Settings/Users

c. C:/Users/username

d. C:/SYSTEM

** please make sure you include screenshots in your answers! Thanks very much