Deleted Keys from the Windows Registry
04/03/08
Deleted Keys from the Windows Registry
Just a quick Did-You-Know bite here. I found this piece of paper which I scribbled some notes on when I was browsing through some forensics book last year (probably).
“Deleted” registry entries are not removed until the registry file size exceeds 500kb, or until regedit /opt is typed, because it will take too much time and processing power to rewrite and compress the registry each time an entry is removed.
Two additional recommended readings are -
Discovery of Computer Data (Link Gone)
Forensic Computer Analysis: An Introduction
Trackback address for this post:
http://altblog.searix.net/comtrack/trackback.php/79
Comments, Trackbacks, Pingbacks:
No Comments/Trackbacks/Pingbacks for this post yet...
This post has 1 feedback awaiting moderation...
Leave a comment:
Alt3rn4tiv3's Tech Blog
| Sun | Mon | Tue | Wed | Thu | Fri | Sat |
|---|---|---|---|---|---|---|
| << < | > >> | |||||
| 1 | ||||||
| 2 | 3 | 4 | 5 | 6 | 7 | 8 |
| 9 | 10 | 11 | 12 | 13 | 14 | 15 |
| 16 | 17 | 18 | 19 | 20 | 21 | 22 |
| 23 | 24 | 25 | 26 | 27 | 28 | 29 |
| 30 | ||||||
Search
Categories
- All
- Challenge Sites (6)
- Contests (7)
- Cool Stuff (13)
- General / Random (13)
- Hacks (16)
- News (2)
- PayPerPost (2)
- Reviews (15)
- Gadgets (0)
- Web Hosting (2)
- Websites (12)
- Security (10)
- Software (2)
Archives
- July 2008 (2)
- May 2008 (1)
- March 2008 (4)
- January 2008 (5)
- December 2007 (10)
- November 2007 (8)
- October 2007 (19)
- September 2007 (3)
- August 2007 (3)
- July 2007 (1)
- More...
Misc
XML FeedsLinks
Who's Online?
- Guest Users: 4
Google Ads
Other Ads
PayPerPost
