Windows Registry Forensics

Discussion Question: Discuss what you would look for within the registry if investigating a security incident. You can focus your discussion on a particular type of incident or more broadly discuss registry security information?