2. l Overview: Define the purpose of the Registry Identify the permissions provided to protect the registry Identify the key registry values to protect Understand the steps needed to audit the registry Understand the steps needed to properly backup the registry database Module 7

3. l DescriptionRegistry

4. l Registry SubTrees HKEY_LOCAL_MACHINE SYSTEM Clone ControlSet001 ControlSet002 CurrentControlSet Select Current Default Failed LastKnownGood Registry

5. l Hives l HKEY_LOCAL_MACHINE\SAMSam, Sam.log, Sam.sav l HKEY_LOCAL_MACHINE\SecuritySecurity, Security.log, Security.sav l HKEY_LOCAL_MACHINE\SoftwareSoftware, Software.log, Software.sav l HKEY_LOCAL_MACHINE\SystemSystem, System.alt, System.log, l...

6. l HKEY_LOCAL_MACHINE\… l SubKeys

7. l Changing Key Permissions l Read l Full Control l Special Access Registry

8. l Default Settings l Registry Tools

9. l Registry Security And Protection

10. l Security Setting

11. l Key Registry Values

12. l Auditing l Key Registry Values

13. l Backing Up and Restoring Keys l Key Registry Values

14. l

15. l