Tags: registry forensics ntuser.dat 

Rating:

Original writeup (https://blog.jettchen.me/posts/golden-persistence/).