Reg
- ID
- S0075
- Type
- Tool
- Associated names
- reg.exe
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
Reg is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information. [1]
Utilities such as Reg are known to be used by persistent threats. [2]
Techniques used (3)
Groups using it (8)
- G0010 Turla
- G0035 Dragonfly
- G0047 Gamaredon Group
- G0049 OilRig
- G0075 Rancor
- G0093 GALLIUM
- G1017 Volt Typhoon
- G1034 Daggerfly