Windows Registry: The Other Half of the Process Story

In my last post, Windows Processes: A SOC Analyst's Guide, I wrote about learning the "family tree" of Windows processes, and how knowing what normal looks like makes the abnormal jump out at you. Wha