Forum Discussion
Running a registry based query
Hello, we have some computers which we need to find out the specific registry value in order to be able to update their OS. The path: HKEY_LOCAL_MACHINE\software\policies\Microsoft\Windows\Win...
That's what I am trying to do but I cant find the correct syntax
Head into https://security.microsoft.com/advanced-hunting
Use this to start with:
>DeviceRegistryEvents
>| limit 100
Then pivot from there using show filters?