Lookup Registry Keys Wildcard
Query
No standalone KQL detected in this source
View source on GitHubAbout this query
// Use Case: Retrieving all software-related configurations and settings from the Windows Registry for system audit or software inventory purposes. WindowsRegistry('HKEY_LOCAL_MACHINE\SOFTWARE*')
Explanation
This query is designed to extract information from the Windows Registry, specifically targeting all entries under the "HKEY_LOCAL_MACHINE\SOFTWARE" path. The purpose of this query is to gather details about software-related configurations and settings on a Windows system. This information can be used for auditing the system or creating an inventory of installed software. Essentially, it helps in understanding what software is configured on the machine and how it is set up.
Details
Ugur Koc
Released: December 13, 2024
Tables
Keywords
Operators