The registry is often used to harvest information for forensics purposes. A good analyst can glean a lot of information that can be used for cyber security reports.

Research at least 2 links online and document at least 3 things that can be pulled from the registry. Several examples of the information that could be learned from the registry are listed below.

You should include the registry keys along with your examples. Describe how this information would be useful in either a legal or forensics instance. You should give different examples from the ones below.

What documents did a user open up?

What wireless networks did the computer connect to?