analysis registry from HDD image !!

hello all …
is there anyway to anlysis registry from image taken by FTK !! how we do that ?? i need open source tools please !
why i need this i'll explain …
some one try to connect to my server via RDP and i want to know if he did this or not i read a lot about RDP forensics all PDF and post taking about registry hives like

\Software\Microsoft\Terminal Server\Client\Default
the application stores the history of the clients private IP addresses the local computer connected to.

\Software\Microsoft\Terminal Server\Client\Servers

the service stores the username used for the connection and also the computer name of the client PC

and some of posts talking about bitmap cache about http//www.forensicfocus.com/Forums/viewtopic/t=5174/

is there any other place ??