Registry Query for OS Version and Service Enumeration (T1012)

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•1

Detects the use of reg.exe to query the Windows registry for information related to software versions or service configurations. This activity is often associated with discovery efforts to identify installed software, system configuration, or potential security controls.