https://github.com/osquery/osquery logo
a

allister

05/09/2022, 3:32 AM
Total noob to Windows everything, so pardon if this is obvious/has been mentioned in scrollback, but it also struck me as odd that I'm enforcing a key with puppet at path
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs
but auditing it at
HKEY_LOCAL_MACHINE
as the first part of the path ¯\_(ツ)_/¯