select from registry where hive like HKEY LOCAL MACHINE and osquery #general

select * from registry where hive like 'HKEY_LOCAL...

mcgrew

09/27/2016, 10:21 PM

select * from registry where hive like 'HKEY_LOCAL_MACHINE' and key = 'SYSTEM\\CurrentControlSet\\Services\\tedkol';