S0075Windows

S0075Reg

Platforms
1
ATT&CK
14.1
References
3

Description

[Reg](https://attack.mitre.org/software/S0075) is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information. (Citation: Microsoft Reg) Utilities such as [Reg](https://attack.mitre.org/software/S0075) are known to be used by persistent threats. (Citation: Windows Commands JPCERT)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0075
  2. https://technet.microsoft.com/en-us/library/cc732643.aspx
  3. https://blogs.jpcert.or.jp/en/2016/01/windows-commands-abused-by-attackers.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

LOLbin
Reg.exe
Technique
Modify Registry
Technique
Query Registry
LOLbin
Regedit.exe
Sub-technique
Regsvcs/Regasm
Sub-technique
Regsvr32
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.