.. /Regini.exe
Star

Alternate data streams

Used to manipulate the registry


Paths:

Resources:
Acknowledgements:

Detection:

Alternate data streams

  1. Write registry keys from data inside the Alternate data stream.

    regini.exe newfile.txt:hidden.ini
    Use case
    Write to registry
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1564.004