# The Windows Registry

> Explore the central configuration database of Windows. Understand registry hives, critical keys for malware persistence, and how to analyze the registry for digital forensics.

Canonical: https://codelivly.com/rooms/the-windows-registry
Last updated: 2026-07-02

| | |
|---|---|
| Level | Beginner |
| Category | Cybersecurity |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 200 |

Dive into the central nervous system of the Windows operating system: The Registry. The Windows Registry module breaks down how Windows stores its configuration, hardware settings, and user preferences in a massive, hierarchical database.

You will learn the architecture of registry hives, how to navigate the complex tree of keys and values, and most importantly, how attackers abuse the registry to establish persistence, escalate privileges, and hide their tracks. Finally, you will discover how forensic analysts extract and parse registry hives to reconstruct attacker timelines and uncover hidden artifacts. By the end of this module, you will understand how to read, secure, and investigate the Windows Registry.

## Lessons

1. Registry Architecture & Hives (30 min)
2. Critical Registry Keys for Security & Persist (30 min)
3. Registry Forensics & Offline Analysis (30 min)

## Related

- [Learning path: Windows Fundamentals](https://codelivly.com/learning-paths/windows-fundamentals)
- [All rooms](https://codelivly.com/rooms)