Windows NT Registry File (REGF)
From Forensics Wiki
Revision as of 02:02, 15 September 2010 by Joachim Metz
The PFF has the following file signature: hexadecimal: 72 65 67 66 ASCII: regf
The REGF basically contains a hierarchy of keys and values.