NTUSER.DAT
N/A
NTUSER.DAT
NTUSER.DAT · N/A · NTUSER.DAT · en-tee-YOO-zer dat · user registry hive · NTUSER hive · Windows · forensics · windows · userWindowsuser registry hive NTUSER hive/en-tee-YOO-zer dat/
Also known as: user registry hive, NTUSER hive
Last updated August 9, 2026
Definition
NTUSER.DAT is each Windows user’s registry hive — holding user-specific settings, Run keys, and many artifacts of activity.
Real-World Example
Parsing a user’s NTUSER.DAT for recent documents and UserAssist execution evidence.
References
Related terms
discuss://translation · public
Translation discussion
Anyone can read and write here. Pick a display name — no email or account. Please keep the thread constructive. Thumb up a rendering you agree with — that helps the editor see consensus; it does not publish the term by itself. You can edit or delete your own comments from this browser; another device or cleared site data cannot.
Community lists who wrote, on which term, and when.
Loading discussion…