Registry

analyzing-malware-persistence-with-autoruns is a Sysinternals Autoruns skill for malware analysis. It helps you inspect Windows persistence in Run keys, services, scheduled tasks, Winlogon, drivers, and WMI, using a repeatable workflow with CSV exports, suspicious-entry review, and report-ready findings.

analyzing-windows-registry-for-artifacts helps analysts extract evidence from Windows Registry hives to identify user activity, installed software, autoruns, USB history, and compromise indicators for incident response or Security Audit workflows.