Chimdi·Aug 24Windows Registry Forensics: Winlogon vs LogonUIRecently, I was attempting CyberDefenders’ CorporateSecrets challenge when I noticed something odd.
Mani·Jun 18How I Broke an Infinite Windows Boot Loop Using Enterprise Deployment CommandsThe Story of a 10-Hour Battle Against an Expired Windows Insider Build, Buggy Installer Scripts, and a 3F0 Motherboard Error.
InDFIR Dudesbymartin korman·Jan 4Regipy MCP: Natural Language Registry Forensics with ClaudeSix years ago, I wrote a blog post introducing regipy, a Python library I built because I was frustrated with existing registry forensic…
Martin St.·Dec 23, 2025Environment Variables on Windows: Where They Quietly Feed You the Wrong ValuesEnvironment variables are not flowing information.They are snapshots. A photograph of the system state at the exact moment a process…
InMeetCyberbyTHM{0x416469747961204D6163686972616A75}·Dec 17, 2025Forensics — Registry FurensicsLearn what the Windows Registry is and how to investigate it.
Tyrik Emptage·Dec 1, 2025Relearning Windows OS Autologin Setup via Registry Editor and Creating Generic Logins for…This blog goes over how to setup an Autologin on Windows for testing purposes via Registry Editor. Some details in this blog is referenced…
InOSINT TeambybhargabKaushik·Sep 26, 2025Volatility3: Navigating the SAM registry hive from memory imageHi Readers! I hope you all are doing well. In this write up we’ll walkthrough the SAM(Security Accounts Manager) windows registry hive from…
Sparisoma Viridi·Sep 21, 2025URL protocol to launch Notepad++Create a protocol in Windows registry and use it on a Hugo post
