killchain-compendium/Post Exploitation/Windows/Registry.md

# Windows Registry

## AutoLogin Password
* Automatic logon password is save in plaintext 
```
reg query "HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon"
```