Glossary
Control set (ControlSet00X)
A numbered copy of the system configuration inside the SYSTEM hive; Select\Current says which one was in use. CurrentControlSet only exists on a live system.
A control set is one of the ControlSet001, ControlSet002… keys in the SYSTEM hive. Each holds a full copy of services, drivers and system settings — including the bam and dam keys. On a running system, CurrentControlSet is a link to the active one; in an offline hive that link does not exist.
The Select key tells you which set to use: Current is the one in use, LastKnownGood the fallback copy. Reading the wrong set gives you an older state: in the site's fictional sample, ControlSet002 holds a pre-intrusion snapshot of BAM. The BAM/DAM Parser reads all sets and marks the active one. Details in where the BAM registry key is.