| Technique | Procedure example |
|---|---|
| T1012 Query Registry |
Reg may be used to gather details from the Windows Registry of a local or remote system at the command-line interface. |
| T1112 Modify Registry |
Reg may be used to interact with and modify the Windows Registry of a local or remote system at the command-line interface. |
| T1552.002 Credentials in Registry |
Reg may be used to find credentials in the Windows Registry. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
