Windows Registry Forensics
Windows Registry Forensics is a specialized branch of digital forensic analysis that examines the Windows Registry—a hierarchical, system-critical database storing configuration and activity data—to identify, extract, and interpret evidence of user behavior, system events, and potentially malicious activities in a legally admissible manner.
12
Publications
386
Citations
26
Authors
13
Institutions
Publications per year
2017–2026
2
Parents
12
Forensic analysis of the Windows registry in memory
Brendan Dolan-Gavitt · Digital Investigation · 2008 · 90 citations · Full text
The Windows Registry as a forensic resource
Harlan Carvey · Digital Investigation · 2005 · 78 citations
Recovering deleted data from the Windows registry
Timothy D. Morgan · Digital Investigation · 2008 · 21 citations · Full text
1–5 of 12
26
1
h-index
1
h-index
1
h-index
Khalifa University of Science and Technology, United Arab Emirates
1 publications · 38 citations
1
h-index
1
h-index
1–5 of 26
13
Mitre (United States)
Bedford, United States
1 h-index
1 publications
90 citations
National Institute of Standards and Technology
Gaithersburg, United States
1 h-index
1 publications
15 citations

University of South Wales
Pontypridd, United Kingdom
1 h-index
3 publications
165 citations

University of Derby
Derby, United Kingdom
1 h-index
1 publications
19 citations

Universiti Teknologi MARA
Shah Alam, Malaysia
1 h-index
4 publications
68 citations
Shandong University
Jinan, China
1 h-index
3 publications
51 citations
Khalifa University of Science and Technology
Abu Dhabi, United Arab Emirates
1 h-index
3 publications
114 citations
Information Technology Laboratory
Gaithersburg, United States
1 h-index
1 publications
15 citations
1–8 of 13
6 publications · 278 citations
6
h-index
1 publications · 16 citations
1
h-index
JDFSL · 1 publications · 38 citations
1
h-index
1 publications · 10 citations
1
h-index
1–4