79125561

Date: 2024-10-25 12:02:58
Score: 2.5
Natty:
Report link

I don't believe that powershell recognizes the HKU hive but if you're willing to use the older CMD syntax, you can replace *HKCU* with *HKU<sid>* where is the user's domain security ID associated with their username.

Reasons:
  • Low length (0.5):
  • No code block (0.5):
  • Single line (0.5):
  • Low reputation (1):
Posted by: David McKinnon