exploring the windows registry for forensic investigation lab