Day 16 | Advent of Cyber 2025 | Registry Forensics Walkthrough | TryHackMe

Day 16 of Advent of Cyber 2025 dives into Windows Registry Forensics with the challenge "Registry Furensics." 🕵️‍♂️

In this walkthrough, I explore how attackers leave traces in the Windows Registry and demonstrate how defenders can uncover persistence mechanisms, malicious entries, and system modifications. By analyzing registry hives and correlating artifacts, I show how forensic investigators reconstruct attacker activity and strengthen incident response.

🔑 Key Highlights:
- Introduction to Windows Registry structure and forensic importance
- Identifying persistence techniques hidden in registry keys
- Detecting suspicious modifications and correlating them with attacker behavior
- Practical registry analysis for blue team investigations

This challenge emphasises the critical role of registry analysis in digital forensics and incident response. Perfect for learners, cybersecurity enthusiasts, and recruiters interested in seeing hands-on forensic investigation skills in action.

👉 Link to join this room: https://tryhackme.com/room/registry-forensics-aoc2025-h6k9j2l5p8

#tryhackme #blueteam #investigations #windows #forensic #registry #hive #rootkey

Видео Day 16 | Advent of Cyber 2025 | Registry Forensics Walkthrough | TryHackMe канала CyberXPopsy