Digital Forensic Investigation Case in OpenText EnCase 23 | Windows Registry | System and SAM Files
How to view the Windows Registry Using OpenText Encase.
System Registry File Investigation and SAM
0:00 - Intro
0:42 - System Registry in EnCase
1:38 - Current Control Set
2:38 - Last Windows Shutdown Time
3:39 - EnCase Decode
4:28 - Finding IP Address within EnCase
6:42- Finding Computer Name with EnCase
7:44 - SAM Registry File
9:48 - F value key Last login etc