Lesson 6 Flashcards
HKEY_CLASSES_ROOT
Shows relationships (called associations) between applications and data file types defined by file extension. Because of the information in this key you can double-click on a data file and the correct application will open and load the file. This root key contains all the information located in HKEY_LOCAL_MACHINE\SOFTWARE\Classes.
HKEY_CURRENT_USER
Contains the user profile for the currently logged on user, storing all the user settings that affect the desktop appearance and default behavior of installed applications
HKEY_LOCAL_MACHINE
Contains system information including detected hardware, application associations, and information for hardware configuration and device drivers
HKEY_USERS
User profiles for all local user accounts, including the profile of the currently logged on user (also shown under HKEY_CURRENT_USER), and profiles for special user accounts
HKEY_CURRENT_CONFIG
Contains configuration information for the current hardware profile which is a set of changes (only changes) to the standard configuration in the Software and System subkeys under HKEY_LOCAL_MACHINE
BCD
Boot Configuration Database
store used by Windows during the bootloader phase of startup, providing the bootloader with information it needs to locate and load the operating system files
Default
The default hive is the user hive for the local SYSTEM account
NTUSER.DAT file
contains the user profile for a single user
application preferences, screen colors, etc.
SAM (Security Accounts Manager)
contains the local security accounts database
critical for user authentication because it stores user passwords
SECURITY hive
contains local security policy setting for the computer (rules for password complexity and how system will handle numerous failed attempts)
SOFTWARE hive
contains configuration settings for software installed on the local computer and other configuration data
SYSTEM hive
contains information used at startup, including device drivers to load as well as the order they will load.
also contains configuration settings, instructions for the starting and configuring of services, and various operating system settings
Root Key
the top 5 folders in the registry
Sub Key
A key the exists within another key
Value Entry
Each setting within a Windows registry key
Active Key
Key within a sub key
REG_BINARY
raw binary data. It shows some hardware data in binary, and shows some binary data in hexadecimal
REG_DWORD
A 4 byte long number (32 bits) stored in binary, hexadecimal or decimal format.
REG_EXPAND_SZ
A single string of text including a variable, which is a value that an application will replace when called
REG_MULTI_SZ
Multiple strings of human readable text separated by a special NULL character that it does not display.
