M-unition » Blog Archive » Tearing up the Windows Registry with python-registryAbout Us Welcome to M-unition, the MANDIANT blog. Here we share our insights about the tools we create and use to find evil and solve crime. Written by William Ballenthin Recently, I wanted to dig deep into a forensic artifact resident in the Windows Registry. To make the task more interesting, I challenged myself to use only tools native to my favorite operating system: Linux. I was quickly disap
