The Windows Registry System Hive stores important system configuration settings and security incident information. Specifically, the System Hive retains logon events, user account changes, installed programs, network connections and security policy modifications. Forensic analysis of the System Hive can extract valuable evidence such as unauthorized logins, malware infections, and changes to user permissions that are critical for cybersecurity investigations.

1. Discuss the Windows Registry System Hive:
1) What information is retained in the hive?
2) Specifically, what security incident information could be
extracted from the System Hive?
1) It should be a minimum of 400 Words not including
references
2) APA Format and scholarly References needed