Skip to content

Latest commit

 

History

History
89 lines (69 loc) · 1.24 KB

Registry.md

File metadata and controls

89 lines (69 loc) · 1.24 KB

Using PowerShell

Registry provider

  • Read a registry key
Get-Item -Path HKLM:\SYSTEM\CurrentControlSet\Services\Spooler
  • Read a registry value
Get-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Services\Spooler
  • Read all subkeys and values
  • Export Registry Keys and Values
  • Import registry keys and values
  • Create new Key
  • Create new value
  • Change Value
  • Delete Value
  • Delete Key

Using Legacy Commands

REG Command

  • Read a registry key
reg query HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
  • Read a registry value
reg query HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa /v restrictanonymoussam
  • Read all subkeys and values
reg query HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa  /s
  • Export Registry Keys and Values
  • Import registry keys and values
  • Create new Key
  • Create new value
  • Change Value
  • Delete Value
  • Delete Key