Get-BluGenieLoadedRegHives



Get-BluGenieLoadedRegHives

SYNOPSIS

Query all loaded registry hives

SYNTAX

Get-BluGenieLoadedRegHives [[-ReturnObject]] [[-Walkthrough]] [<CommonParameters>]

DESCRIPTION

Query all loaded registry hives

EXAMPLES

EXAMPLE 1

Get-BluGenieLoadedRegHives

This will return a list of all the loaded registry hives

- Sample Output -

UserName    : S-1-5-19
ProfilePath :
UserHive    : HKEY_USERS\S-1-5-19
UserFromSID : NT AUTHORITY\LOCAL SERVICE
LoadedShell : False

UserName    : S-1-5-20
ProfilePath :
UserHive    : HKEY_USERS\S-1-5-20
UserFromSID : NT AUTHORITY\NETWORK SERVICE
LoadedShell : False

UserName    : S-1-5-21-2041101783-1631109279-337038772-500
ProfilePath : C:\Users\Administrator.TESTLAB
UserHive    : HKEY_USERS\S-1-5-21-2041101783-1631109279-337038772-500
UserFromSID : TESTLAB\Administrator
LoadedShell : True

UserName    : S-1-5-18
ProfilePath :
UserHive    : HKEY_USERS\S-1-5-18
UserFromSID : NT AUTHORITY\SYSTEM
LoadedShell : False

PARAMETERS

ReturnObject

-ReturnObject [<SwitchParameter>]
   Return information as an Object.
   By default the data is returned as a Hash Table
   
   <Type>SwitchParameter<Type>
   
   Required?                    false
   Position?                    1
   Default value                False
   Accept pipeline input?       false
   Accept wildcard characters?  false

Walkthrough

-Walkthrough [<SwitchParameter>]
   
   Required?                    false
   Position?                    2
   Default value                False
   Accept pipeline input?       false
   Accept wildcard characters?  false

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.