Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to get information about the hardware from an offline version of HKLM/SOFTWARE hive? There is OEMInformation in there, which gives things like machine manufacturer, but does the machine need to be on to get this information?

share|improve this question

Yes and no. People can get information about your hardware by opening up the computer. However your asking more specifically about the Registry. Well the machine needs to be on. But you don't need to be booted into Windows. You can access the registry using a Live CD. Using a Live CD on the local computer you can achieve an also lot. Such as run better virus scans, crack passwords, add files to the system, remove files from the system, modify files on the system and much more. However the computer will most likely need to be on and have access to the internet or the network in order for someone to access the registry.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.