# Registry - Security 분석 방법

1. [https://live.sysinternals.com/](https://live.sysinternals.com/)  
    A. 상단 경로에서 psexec.exe 설치
    
2. CMD
    
3. psexec -sid cmd.exe  
    A. 관리자 권한 실행 확인  
    
    ![](https://velog.velcdn.com/images/hskang00/post/77292c79-c95d-493e-adb7-87a0c9f6cf93/image.png align="left")
    

4. 같은 cmd Console를 통해서 regedit 실행
    
5. ![](https://velog.velcdn.com/images/hskang00/post/97d12fe2-5f2a-49e9-9acb-34556d0a6ccf/image.png align="left")
    
    일반 Regedit 접근으로 확인할 수 없었던 내용을 확인 가능
    

#   
reference

[https://4sysops.com/archives/how-to-access-the-sam-and-security-hives-in-the-registry-using-the-system-account/](https://4sysops.com/archives/how-to-access-the-sam-and-security-hives-in-the-registry-using-the-system-account/)