Files
oscp/Windows/Information Gathering/Installed Program.md
T
2025-11-21 17:17:42 +01:00

15 lines
214 B
Markdown

Installed Applications
Current running program
```powershell
Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*" | select displayname
```
```powershell
Get-Process
```