5) Registry Flashcards
1
Q
What are the 4 Main subkeys of HKLM?
A
SAM, SECURITY, SOFTWARE, and SYSTEM
2
Q
Which of the following two describes the format of a registry entry?
a) HIVE\KEY\SubKey1\Subkey2\Value=”Data”
b) HIVE\KEY\SubKey1\Subkey2\Data=”Value”
A
a) HIVE\KEY\SubKey1\Subkey2\Value=”Data”
3
Q
Give an example of a Windows API for accessing the registry?
A
RegCloseKey, RegCreateKey, RegDeleteKey, RegEnumKey, RegEnumValue, RegOpenKey,
,RegQueryValue, ETC
4
Q
Why might a piece of Malware create a registry key with 255 or more characters?
A
Due to a bug in Regedit and many other registry editing programs, these keys are not
displayed and as such are essentially hidden.
