windows-priv-esc Windows Registry Forensics Cheat Sheet {% file src="../.gitbook/assets/thm-reg-forensics.pdf" %}