Forum Discussion
How to deleting a registry key
I would like to know if you have a way to remediated a malicious registry key with Defender XDR ?
Deleted Hi, yes I too still find it limiting that's why if I have to get my hands on the registry I deploy through Intune.
Hi, you can create a script in powershell and deploy it via intune to modify or delete registry keys; if you have the right licenses you can also use proactive remedies
- # Provide registry key path
$regPath = "HKLM:\Software\Adobe"
# Check if the registry key exists
if (Test-Path -Path $regPath) {
try {
Remove-Item -Path $regPath -force
Write-Host "Registry key $regPath deleted."
}
Catch {
Write-error $_
}
}
else {
Write-Host "Registry key $regPath does not exist."
}