The Windows Registry Adventure #5: The regf file format

Part 4 of the Windows Registry Adventure series, explaining hive files and the overall registry layout, laying the groundwork for the later attack surface analysis.

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.

Part 6 of the Windows Registry Adventure series, examining kernel-mode registry objects and the additional attack surface they expose to privilege escalation research.

Part 3 of the Windows Registry Adventure series, collecting learning resources, tooling, and background reading for understanding registry internals before deeper research.

Part 1 of the Windows Registry Adventure series, introducing the research goals, methodology, and headline results from auditing how Windows parses registry data.

Part 2 of the Windows Registry Adventure series, giving a brief history of the registry as a Windows feature and how its evolution shaped today's attack surface.