Windows registry artifactAtera
Displays artifacts relating to Atera
- Third Party Applications
- 2 keys
SYSTEM
Registry keys
2 keys that RECmd reads for this artifact
SYSTEMrecursiveCurrentControlSet\Services\AteraAgentDisplays artifacts relating to Atera
SYSTEMrecursiveControlSet00*\Services\AteraAgentDisplays artifacts relating to Atera
References
2 links
Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)