- Mastering Reverse Engineering
- Reginald Wong
- 167字
- 2021-06-10 19:40:24
The registry system
In Windows, the registry is a common database that contains system-wide configuration and application settings. Examples of stored information in the registry are as follows:
- Associated programs that execute specific files:
- DOCX files are associated with Microsoft Word
- PDF files are associated with Adobe Reader
- Associated icons to specific files and folders
- Software settings:
- Uninstall configuration
- Update sites
- Ports used
- Product IDs
- User and group profiles
- Printer setup:
- Default printer
- Driver names
- Designated drivers for specific services
The registry is stored in hive files. The list of hive files is also found in the registry itself, as can be seen in the following screenshot:

Writing and reading information from the registry requires using Windows registry APIs. The registry can be viewed visually using the Registry Editor. Entries in the right pane of the Registry Editor are the registry keys. On the left pane, the registry values are found under the Name column, as can be seen in the following screenshot:

推薦閱讀
- INSTANT Netcat Starter
- 白帽子講Web安全(紀(jì)念版)
- 零信任網(wǎng)絡(luò):在不可信網(wǎng)絡(luò)中構(gòu)建安全系統(tǒng)
- Wireshark 2 Quick Start Guide
- 計(jì)算機(jī)病毒分析與防范大全(第3版)
- Preventing Digital Extortion
- 隱私計(jì)算
- 解密數(shù)據(jù)恢復(fù)
- Mastering Reverse Engineering
- Learning Pentesting for Android Devices
- 黑客攻防實(shí)戰(zhàn)從入門到精通
- 交換機(jī)·路由器·防火墻(第2版)
- Web安全攻防從入門到精通
- 云計(jì)算安全:關(guān)鍵技術(shù)、原理及應(yīng)用
- 信息系統(tǒng)安全等級(jí)化保護(hù)原理與實(shí)踐