ConceptsHKCU
HKCU
HKEY_CURRENT_USER: the Windows registry hive holding settings for the currently logged-in user. Defenders examine it for per-user persistence and configuration that attackers modify, such as user-level autorun entries.
7 direct links3 lessons
Concept Neighborhood
Explore this concept’s connections in the groups below.
Related · bigger circles cover more lessons
Start here
Process
A related concept to explore, covered by 6 lessons.
Relatedsorted by lesson coverage
ProcessStart here
6
lessons
Security Context
6
lessons
PowerShell Detection
5
lessons
HKLM
3
lessons
LSASS
2
lessons
Boot Persistence
1
lesson
Show 1 more connection
Related Lessons
3 lessons cover this conceptProcesses, Users, and the Idea of Security Context
General Beginner
Windows Essentials for Defenders
General Beginner
Reading Endpoint Evidence Like a Defender
General Beginner
Sign in to open lesson content directly.