312-49 · Question #55
Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:
The correct answer is A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion \ProfileList. Security Identifiers (SIDs) for user accounts are stored in the Windows Registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. Each subkey under ProfileList is named with the user's SID and contains values such as 'ProfileImagePath', which…
Question
Microsoft Security IDs are available in Windows Registry Editor. The path to locate IDs in Windows 7 is:
Options
- AHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion \ProfileList
- BHKEY_LOCAL_MACHlNE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \NetworkList
- CHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentsVersion \setup
- DHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
How the community answered
(24 responses)- A92% (22)
- B4% (1)
- C4% (1)
Explanation
Security Identifiers (SIDs) for user accounts are stored in the Windows Registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. Each subkey under ProfileList is named with the user's SID and contains values such as 'ProfileImagePath', which maps the SID to the corresponding user profile folder. This is a critical location for forensic investigators to correlate SIDs (found in event logs, ACLs, etc.) back to specific user accounts. The other registry paths listed serve different purposes (network lists, setup data, scheduled tasks).
Topics
Community Discussion
No community discussion yet for this question.