最終更新:2017-03-14 (火) 18:11:45 (2599d)
レジストリ/ファイル
https://msdn.microsoft.com/en-us/library/ms724877(v=vs.85).aspx
HKEY_LOCAL_MACHINE/SAM? Windows/System32/config/SAM? HKEY_LOCAL_MACHINE/SECURITY? Windows/System32/config/SECURITY? HKEY_LOCAL_MACHINE/SYSTEM Windows/System32/config/SYSTEM? HKEY_LOCAL_MACHINE/SOFTWARE Windows/System32/config/SOFTWARE? HKEY_USERS/.DEFAULT? Windows/System32/config/DEFAULT? HKEY_CURRENT_USER %USERPROFILE%/NTUSER.DAT HKEY_CURRENT_USER/Software/Classes? %USERPROFILE%\Local Settings\Application Data\Microsoft\Windows\UsrClass?.dat
参考
http://www.forensicswiki.org/wiki/Windows_Registry
http://www.atmarkit.co.jp/ait/articles/0901/09/news145.html
