Windows registry artifactLogonBanner
Legal text caption that is displayed to a user before logon
- System Info
- 4 keys
SOFTWARE
Registry keys
4 keys that RECmd reads for this artifact
SOFTWARElegalnoticecaptionMicrosoft\Windows\CurrentVersion\Policies\SystemLegal text caption that is displayed to a user before logon
SOFTWARElegalnoticetextMicrosoft\Windows\CurrentVersion\Policies\SystemLegal text displayed to the user for acknowledgment before logon
SOFTWARELegalNoticeCaptionMicrosoft\Windows NT\CurrentVersion\WinlogonLegal text caption that is displayed to a user before logon
SOFTWARELegalNoticeTextMicrosoft\Windows NT\CurrentVersion\WinlogonLegal text displayed to the user for acknowledgment before logon
References
1 link
Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)