In this chapter, we will cover the following recipes:
- Extracting and viewing Windows Registry files with Magnet AXIOM
- Parsing Registry files with RegRipper
- Recovering deleted Registry artifacts with Registry Explorer
- Registry analysis with FTK Registry Viewer