Windows Under The Hood Flashcards
Complex binary file used to store configuration data about a particular Windows system. To edit it, users can use the applets found in the Control Panel
Registry
Registry files
Hives
Programs used to edit the Windows Registry
Registry Editor/regedit
Five main categories in the Windows Registry
Root keys
Root key that defined the standard class objects used by Windows
HKEY_CLASSES_ROOT
A named group of functions that defines what you can do with the object it represents
Class Object
Root key that stores the current user settings
HKEY_CURRENT_USER
Root key that stores all of the personalized information for each user
HKEY_USERS
Root key that contains all the data for a system’s non-user-specific configurations. Encompasses every device and every program in your computer
HKEY_LOCAL_MACHINE
If the values in HKEY_LOCAL_MACHINE have more than one option, this root key defines which one is currently being used
HKEY_CURRENT_CONFIG
These are the most flexible type of value and are very common. Can put any form of data in these
String Value
These values store nothing more than long strings of ones and zeros
Binary Value
These values are like Binary values but are limited to exactly 32 bits
DWORD Value
These values are like Binary values but are limited to exactly 64 bits
QWORD Value
A full Registry editing tool in the Command-Line interface. Can view Registry keys and values, import and export some or all of a Registry, and even compare two different versions of a Registry
Reg command