W2L1ISS

Hardware/Software Setup RequiredWindows computerAccess to cmd.exe and regedit32.exeProblem DescriptionExamine a Windows Registry to access keys, subkeys, and values.Estimated completion time: 60 minutesOutcomePrepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation.Validation/Evaluation

• Open a command line window on a Windows computer
• At the prompt, type "regedit32" and press enter to open the Windows Registry
• Explore the Registry keys, subkeys, and values taking note of the type of information contained in each
• Prepare a one-paragraph summary detailing how the information contained in the Windows Registry might be useful in a forensic investigation