{"id":2873,"date":"2026-08-10T09:00:00","date_gmt":"2026-08-10T09:00:00","guid":{"rendered":"https:\/\/nokobox.com\/index.php\/item\/pluralsight-specialized-dfir-windows-registry-forensics-2023-4\/"},"modified":"2026-08-10T09:00:00","modified_gmt":"2026-08-10T09:00:00","slug":"pluralsight-specialized-dfir-windows-registry-forensics-2023-4","status":"publish","type":"digital_item","link":"https:\/\/nokobox.com\/index.php\/item\/pluralsight-specialized-dfir-windows-registry-forensics-2023-4\/","title":{"rendered":"Pluralsight \u2013 Specialized DFIR: Windows Registry Forensics 2023-4"},"content":{"rendered":"<div class=\"w-post-elm post_content\">\n<h2 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Description<\/span><\/h2>\n<div id=\"course-page-hero\" dir=\"ltr\" style=\"text-align: left\">\n<div class=\"course-content-about\">\n<div class=\"course-content-about\">\n<p><span style=\"vertical-align: inherit\">Specialized DFIR course: Windows Registry Forensics. The Windows registry is a key source of information during forensic investigations, but registry artifacts are often misunderstood. In this course, Specialized DFIR: Windows Registry Forensics, you\u2019ll learn how to properly analyze the Windows registry to uncover signs of malicious activity. First, you\u2019ll explore where registry hives are located and how to get them. Next, you\u2019ll see how backdoors remain stable in the registry. Finally, you\u2019ll learn how to determine whether a program has been run from registry artifacts. After completing the course, you will have the skills and knowledge of Windows registry analysis needed to perform forensic analysis.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">What you will learn in the course<\/span><\/h3>\n<ul dir=\"ltr\" style=\"text-align: left\">\n<li><span class=\"accordion-content__row__title\"><span style=\"vertical-align: inherit\">Windows registry concepts<\/span><\/span><\/li>\n<li><span class=\"accordion-content__row__title\">RegRipper<\/span><\/li>\n<li><span class=\"accordion-content__row__title\">RecentDocs Key Analysis<\/span><\/li>\n<li><span class=\"accordion-content__row__title\">ShellBags Key Analysis<\/span><\/li>\n<li><span class=\"accordion-content__row__title\"><span style=\"vertical-align: inherit\">Analysis of ShimCache<\/span><\/span><\/li>\n<li><span class=\"accordion-content__row__title\">AmCache Analysis<\/span><\/li>\n<li><span class=\"accordion-content__row__title\">UserAssist Analysis<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">And ..<\/span><\/li>\n<\/ul>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Specialized DFIR course details: Windows Registry Forensics<\/span><\/h3>\n<ul dir=\"ltr\" style=\"text-align: left\">\n<li><span style=\"vertical-align: inherit\">Publisher: <\/span><a href=\"https:\/\/href.li\/?https:\/\/www.pluralsight.com\/courses\/specialized-difr-windows-registry-forensics\" target=\"_blank\"><span style=\"vertical-align: inherit\">Pluralsight<\/span><\/a><\/li>\n<li><span style=\"vertical-align: inherit\">Instructor: <\/span><a href=\"https:\/\/downloadlynet.ir\/tag\/tyler-hudak\/\"><span style=\"vertical-align: inherit\">Tyler Hudak<\/span><\/a><\/li>\n<li><span style=\"vertical-align: inherit\">Training level: beginner to advanced<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Training duration: 1 hour and 10 minutes<\/span><\/li>\n<\/ul>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Course headings<\/span><\/h3>\n<p dir=\"ltr\" style=\"text-align: left\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-896427 size-full\" src=\"https:\/\/downloadly.ir\/wp-content\/uploads\/2024\/04\/Specialized-DFIR-Windows-Registry-Forensics.jpg\" alt=\"Specialized DFIR: Windows Registry Forensics \" width=\"862\" height=\"590\"><\/p>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Course images<\/span><\/h3>\n<p dir=\"ltr\" style=\"text-align: left\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-896428 size-full\" src=\"https:\/\/downloadly.ir\/wp-content\/uploads\/2024\/04\/Specialized-DFIR-Windows-Registry-Forensics-1.jpg\" alt=\"Specialized DFIR: Windows Registry Forensics\" width=\"664\" height=\"96\"><\/p>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Sample video of the course<\/span><\/h3>\n<div style=\"width: 640px;\" class=\"wp-video\"><span class=\"mejs-offscreen\">Video Player<\/span><\/p>\n<div id=\"mep_0\" class=\"mejs-container mejs-container-keyboard-inactive wp-video-shortcode mejs-video\" tabindex=\"0\" role=\"application\" aria-label=\"Video Player\" style=\"width: 640px; height: 360px; min-width: 217px;\">\n<div class=\"mejs-inner\">\n<div class=\"mejs-mediaelement\"><mediaelementwrapper id=\"video-123277-1\"><video class=\"wp-video-shortcode\" id=\"video-123277-1_html5\" width=\"640\" height=\"360\" preload=\"metadata\" src=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/Specialized_DFIR_Windows_Registry_Forensics_Downloadly.ir.mp4?_=1\" style=\"width: 640px; height: 360px;\"><source type=\"video\/mp4\" src=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/Specialized_DFIR_Windows_Registry_Forensics_Downloadly.ir.mp4?_=1\"><a href=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/Specialized_DFIR_Windows_Registry_Forensics_Downloadly.ir.mp4?nocache=1786096596935\">https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/Specialized_DFIR_Windows_Registry_Forensics_Downloadly.ir.mp4<\/a><\/video><\/mediaelementwrapper><\/div>\n<div class=\"mejs-layers\">\n<div class=\"mejs-poster mejs-layer\" style=\"display: none; width: 100%; height: 100%;\"><\/div>\n<div class=\"mejs-overlay mejs-layer\" style=\"display: none; width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-loading\"><span class=\"mejs-overlay-loading-bg-img\"><\/span><\/div>\n<\/div>\n<div class=\"mejs-overlay mejs-layer\" style=\"display: none; width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-error\"><\/div>\n<\/div>\n<div class=\"mejs-overlay mejs-layer mejs-overlay-play\" style=\"width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-button\" role=\"button\" tabindex=\"0\" aria-label=\"Play\" aria-pressed=\"false\"><\/div>\n<\/div>\n<\/div>\n<div class=\"mejs-controls\">\n<div class=\"mejs-button mejs-playpause-button mejs-play\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Play\" aria-label=\"Play\" tabindex=\"0\"><\/button><\/div>\n<div class=\"mejs-time mejs-currenttime-container\" role=\"timer\" aria-live=\"off\"><span class=\"mejs-currenttime\">00:00<\/span><\/div>\n<div class=\"mejs-time-rail\"><span class=\"mejs-time-total mejs-time-slider\" role=\"slider\" tabindex=\"0\" aria-label=\"Time Slider\" aria-valuemin=\"0\" aria-valuemax=\"0\" aria-valuenow=\"0\" aria-valuetext=\"00:00\"><span class=\"mejs-time-buffering\" style=\"display: none;\"><\/span><span class=\"mejs-time-loaded\"><\/span><span class=\"mejs-time-current\"><\/span><span class=\"mejs-time-hovered no-hover\"><\/span><span class=\"mejs-time-handle\"><span class=\"mejs-time-handle-content\"><\/span><\/span><span class=\"mejs-time-float\"><span class=\"mejs-time-float-current\">00:00<\/span><span class=\"mejs-time-float-corner\"><\/span><\/span><\/span><\/div>\n<div class=\"mejs-time mejs-duration-container\"><span class=\"mejs-duration\">00:00<\/span><\/div>\n<div class=\"mejs-button mejs-volume-button mejs-mute\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Mute\" aria-label=\"Mute\" tabindex=\"0\"><\/button><a href=\"javascript:void(0);\" class=\"mejs-volume-slider\" aria-label=\"Volume Slider\" aria-valuemin=\"0\" aria-valuemax=\"100\" role=\"slider\" aria-orientation=\"vertical\"><span class=\"mejs-offscreen\">Use Up\/Down Arrow keys to increase or decrease volume.<\/span><\/p>\n<div class=\"mejs-volume-total\">\n<div class=\"mejs-volume-current\" style=\"bottom: 0px; height: 100%;\"><\/div>\n<div class=\"mejs-volume-handle\" style=\"bottom: 100%; margin-bottom: -3px;\"><\/div>\n<\/div>\n<p><\/a><\/div>\n<div class=\"mejs-button mejs-fullscreen-button\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Fullscreen\" aria-label=\"Fullscreen\" tabindex=\"0\"><\/button><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div dir=\"ltr\" style=\"text-align: left\">\n<h3><span style=\"vertical-align: inherit\">Installation guide<\/span><\/h3>\n<p><span style=\"vertical-align: inherit\">After Extract, view with your favorite Player.<\/span><\/p>\n<p><span style=\"vertical-align: inherit\">English subtitle<\/span><\/p>\n<p><span style=\"vertical-align: inherit\">Quality: 720p<\/span><\/p>\n<\/div>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">download link<\/span><\/h3>\n<p dir=\"ltr\" style=\"text-align: left\"><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Pluralsight_Specialized_DFIR_Windows_Registry_Forensics_2023-4_Downloadly.ir.rar?nocache=1786096595\"><span style=\"vertical-align: inherit\">Download file \u2013 219 MB<\/span><\/a><\/p>\n<p dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">File(s) password: www.downloadly.ir<\/span><\/p>\n<h3 dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">Size<\/span><\/h3>\n<p dir=\"ltr\" style=\"text-align: left\"><span style=\"vertical-align: inherit\">219 MB<\/span><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Description Specialized DFIR course: Windows Registry Forensics. The Windows registry is a key source of information during forensic investigations, but registr<\/p>\n","protected":false},"author":1,"template":"","dgi_category":[10458],"dgi_tag":[30701,30702,30703,30704,30705,30706,30707,30708,30709,30710,30711,30712,30713,30714,30715,30716,30717,30718,30719,30720,30721,30722,30723,20587],"class_list":["post-2873","digital_item","type-digital_item","status-publish","has-post-thumbnail","hentry","dgi_category-video-tutorials","dgi_tag-course-specialized-dfir-windows-registry-forensics","dgi_tag-download-course-specialized-dfir-windows-registry-forensics","dgi_tag-download-link-specialized-dfir-windows-registry-forensics","dgi_tag-download-links-specialized-dfir-windows-registry-forensics","dgi_tag-download-paid-course-specialized-dfir-windows-registry-forensics","dgi_tag-download-specialized-dfir-windows-registry-forensics","dgi_tag-download-specialized-dfir-windows-registry-forensics-course","dgi_tag-download-specialized-dfir-windows-registry-forensics-course-for-free","dgi_tag-free-download-course-specialized-dfir-windows-registry-forensics","dgi_tag-free-download-link-specialized-dfir-windows-registry-forensics","dgi_tag-free-download-links-specialized-dfir-windows-registry-forensics","dgi_tag-free-download-paid-course-specialized-dfir-windows-registry-forensics","dgi_tag-free-download-specialized-dfir-windows-registry-forensics","dgi_tag-free-links-download-specialized-dfir-windows-registry-forensics","dgi_tag-free-paid-course-download-links-specialized-dfir-windows-registry-forensics","dgi_tag-free-specialized-dfir-windows-registry-forensics","dgi_tag-free-specialized-dfir-windows-registry-forensics-download-course","dgi_tag-paid-course-specialized-dfir-windows-registry-forensics","dgi_tag-specialized-dfir-windows-registry-forensics-download-course","dgi_tag-specialized-dfir-windows-registry-forensics-download-links","dgi_tag-specialized-dfir-windows-registry-forensics-for-free","dgi_tag-specialized-dfir-windows-registry-forensics-free-course","dgi_tag-specialized-dfir-windows-registry-forensics-free-download","dgi_tag-tyler-hudak"],"_links":{"self":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item\/2873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item"}],"about":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/types\/digital_item"}],"author":[{"embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":0,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item\/2873\/revisions"}],"wp:attachment":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/media?parent=2873"}],"wp:term":[{"taxonomy":"dgi_category","embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/dgi_category?post=2873"},{"taxonomy":"dgi_tag","embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/dgi_tag?post=2873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}