Issue with Digital Forensics – Windows Registry Analysis 1.3 (Challenge Q2 & Q3)

Career Paths Digital Forensics
1

Hello Team,

I am facing an issue while attempting Digital Forensics – Windows Registry Analysis 1.3, specifically Challenge Question 2 and Question 3.

I followed the exact steps as mentioned in the walkthrough/lab instructions, but the solutions for Q2 and Q3 are not working or matching the expected answers on my end.

To help you better understand the issue, I have:

  • Carefully rechecked the registry paths and timestamps

  • Verified the hive files used

  • Taken screenshots of each step and the final output, which I am attaching here for reference

I would really appreciate it if someone from the community or Cybrary team could:

  • Guide me on whether I am missing any step

  • Clarify if there is an update/change in the challenge

  • Or confirm if this is a known issue with the lab environment

Looking forward to your guidance and support.

Thank you in advance.

Regards,
Vikrant

2
2996×649 115 KB

2

Hey there - I think you may be looking at the wrong registry files. In the screenshot above, you’re showing the exported SYSTEM files from Parts 1-4 of the Guided Exercise. The Challenge Exercise notes that you should be examining the SYSTEM file that you cleaned in Part 5. This is a different set of files - located in the Analysis folder on the Desktop.

3

Thank you for your guidance