> For the complete documentation index, see [llms.txt](https://dika-maulidal.gitbook.io/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry.md).

# Registry

- [NTUSER.DAT](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/ntuser.dat.md)
- [UsrClass.dat](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/usrclass.dat.md)
- [System](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/system.md)
- [SAM (Security Account Manager)](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/sam-security-account-manager.md)
- [Software](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/software.md)
- [AmCache.hve](https://dika-maulidal.gitbook.io/home/digital-forensics/windows-forensics/registry/amcache.hve.md)