As a forensic investigator, the registry can be a gold mine of information on who, what, where, and when something happened on a system, allowing you to immediately link the culprit to the acts in question.