The Windows Registry

Use reg_query [x86|x64] [HIVE\path\to\key] to query a specific key in the registry. This command will print the values within that key and a list of any subkeys. The x86/x64 option is required and forces Beacon to use the WOW64 (x86) or native view of the registry. reg_query [x86|x64] [HIVE\path\to\key] [value] will query a specific value within a registry key.