|
Hive Registry Path
|
Hive File Path
|
|
HKEY_LOCAL_MACHINE
\SYSTEM
|
\winnt\system32\config\system
|
|
HKEY_LOCAL_MACHINE
\SAM
|
\winnt\system32\config\sam
|
|
HKEY_LOCAL_MACHINE
\SECURITY
|
\winnt\system32\config\security
|
|
HKEY_LOCAL_MACHINE
\SOFTWARE
|
\winnt\system32\config\software
|
|
HKEY_LOCAL_MACHINE
\HARDWARE
|
Volatile hive
|
|
HKEY_LOCAL_MACHINE \SYSTEM \Clone
|
Volatile hive
|
|
HKEY_USERS
\UserProfile
|
Profile; usually under \winnt\profiles\usere
|
|
HKEY_USERS.DEFAULT
|
\winnt\system32\config\default
|
0 Comments