killchain-compendium/Enumeration/Windows/Registry.md

10 lines
141 B
Markdown

# Registry Enumeration
## Usage
Query keys including the string `password` via `reg`.
```sh
reg query HKLM /f "password" /t REG_SZ /s
```