osquery> select * from registry where hive like 'HKEY_LOCAL_MACHINE' ...> ; +--------------------+-----+-------------+-----------+--------+-----------------+------------+ | hive | key | subkey | name | type | data | mtime | +--------------------+-----+-------------+-----------+--------+-----------------+------------+ | HKEY_LOCAL_MACHINE | | BCD00000000 | (Default) | REG_SZ | (value not set) | 1474302467 | | HKEY_LOCAL_MACHINE | | HARDWARE | (Default) | REG_SZ | (value not set) | 1474302448 | | HKEY_LOCAL_MACHINE | | SAM | (Default) | REG_SZ | (value not set) | 1474302466 | | HKEY_LOCAL_MACHINE | | SECURITY | (Default) | REG_SZ | (value not set) | 1474302466 | | HKEY_LOCAL_MACHINE | | SOFTWARE | (Default) | REG_SZ | (value not set) | 1474302466 | | HKEY_LOCAL_MACHINE | | SYSTEM | (Default) | REG_SZ | (value not set) | 1474302448 | +--------------------+-----+-------------+-----------+--------+-----------------+------------+ osquery>