How Do Tipsters Discover Previously Unknown Registry Keys?


geekinchief

Well-known member
Local time
4:39 AM
Posts
17
OS
Windows 11
I've been wondering how folks go about discovering new registry keys in Windows 11 (or 10) like, for example, the Strart_ShowClassicMode key: how did the first person who found that, find it? It's not in the registry already so did they get a tip from someone at Microsoft?

I have tried using Process Monitor, which logs all queries for Registry keys, to see if the system is querying for any interesting keys that don't exist by default, but I'm not finding anything. It doesn't even show Start_ShowClassicMode as something Windows 11 looks for, unless you have already created the key. What's the trick that the pros use to find out about these secret keys?
 

My Computer My Computer

At a glance

Windows 11Core i7-8550U16GBIntel HD Graphics
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
Lenovo ThinkPad X1 Carbon
CPU
Core i7-8550U
Memory
16GB
Graphics Card(s)
Intel HD Graphics
Screen Resolution
1920 x 1080
Browser
Chrome
Hello geekinchief, welcome to Eleven Forums.

all it takes is someone at Microsoft to create the keys for the purpose of software development, then for someone else to publish the results. Microsoft used to publish a book called Windows Registry Guide by Jerry Honeycutt on Microsoft Press. That book is not maintained and updated. Microsoft dose not like people playing with the registry directly, as it is so error prone - better to use Group Policy, but Group Policy does not cover everything.
 

My Computers My Computers

  • At a glance

    Windows 11AMD Ryzen 5 560016 GBSapphire Radeon RX 6500XT (8 GB version)
    OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 5600
    Motherboard
    MSI B550-A Pro
    Memory
    16 GB
    Graphics Card(s)
    Sapphire Radeon RX 6500XT (8 GB version)
    Monitor(s) Displays
    BenQ Mobuiz EX2710Q QHD, Iiyama ProLite X23377HDS
    Hard Drives
    MSI Spatium M461 4TB
  • At a glance

    Windows 11Intel Celeron N4020
    Operating System
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    Acer A114
    CPU
    Intel Celeron N4020
MS documents everything so if you do not have access to it, it is only a matter of time till it leaks.
If you are part of Business or Developers, you will get access to it ASAP, otherwise you have to wait.
I watch for the latest security baseline where tweaks are posted or alternatively something like admx.

I have just updated my tweaks for the Edge 92 to automatically use HTTPS, new policies are on top.
 

My Computer My Computer

At a glance

Home2FH2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
OS
Home2FH2Can
Computer type
PC/Desktop
CPU
AMD Ryzen 5 8600G (07/24)
Motherboard
ASROCK B650M-HDV/M.2 (07/24) BIOS 4.43 AGESA ComboAM5 1.3.0.1b Patch A (07/26)
Memory
2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL40 (07/24)
Graphics Card(s)
ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
Sound Card
Creative Sound BlasterX AE-5 Plus (05/24)
Monitor(s) Displays
24" Philips 24M1N3200ZS/00 (05/24)
Screen Resolution
1920×1080@165Hz via DP1.4
Hard Drives
Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
PSU
Seasonic Core GM 550 Gold (04/24)
Case
Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
Cooling
Noctua NH-U12S with Noctua NF-P12 (04/24)
Keyboard
HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
Mouse
Logitech M330 Silent Plus (07/26)
Internet Speed
500/100 Mbps via RouterOS (05/21) & TCP Optimizer
Browser
Edge, Brave for YouTube, LibreWolf for FB
Antivirus
NextDNS blocking 1/3 Traffic
Other Info
Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)
Interesting as I was wondering the very same thing and these tweaks appear almost as soon as the OS goes live. The information must be out there somewhere... and we are very pleased it is :cool:
 

My Computer My Computer

At a glance

W11 Pro Future Platform 29600 branch latest b...Intel i58GbIntel HD Graphics
OS
W11 Pro Future Platform 29600 branch latest build
Computer type
Laptop
Manufacturer/Model
Dell 7760 Mobile Precision 17"
CPU
Intel i5
Motherboard
Unknown
Memory
8Gb
Graphics Card(s)
Intel HD Graphics
Sound Card
Realtek
Monitor(s) Displays
Internal
Hard Drives
2 x 256Gb SSD
PSU
Dell 240 watt
Mouse
Dell Premier Bluetooth
Internet Speed
50Mbps
Browser
Edge
Antivirus
Default Microsoft Security
Hi there
How do hackers get into systems, CIA agents break into Russian systems / vice versa. People start probably by debugging and memory dumping everything and probably looking at 1000's of registry keys looking to see what they do or where they are used etc etc. Probaly takes them hours and hours too at cost of a lot of oher more exciting things in life to do. !!

It's not impossible but a lot of work.

I'm not sure there's one of those yellow "Idiots Guide" to hacking around but who knows what's available on the "Dark Web".

The real answer is probably echoed by "Those in the know" following the famous Hollywood line -- If I told you --I'd have to kill you.

Cheers
jimbo
 

My Computer My Computer

At a glance

Windows XP,11 Linux Fedora Rawhide pre-releas...2 X Intel i7
OS
Windows XP,11 Linux Fedora Rawhide pre-release 46
Computer type
PC/Desktop
CPU
2 X Intel i7
Screen Resolution
4KUHD X 2
I've been wondering how folks go about discovering new registry keys in Windows 11 (or 10) like, for example, the Strart_ShowClassicMode key: how did the first person who found that, find it? It's not in the registry already so did they get a tip from someone at Microsoft?

I have tried using Process Monitor, which logs all queries for Registry keys, to see if the system is querying for any interesting keys that don't exist by default, but I'm not finding anything. It doesn't even show Start_ShowClassicMode as something Windows 11 looks for, unless you have already created the key. What's the trick that the pros use to find out about these secret keys?
You might be interested in the life and works of Mark Russinovich, a brilliant computer genius who discovered and revealed so much about the inner workings of Windows, that Microsoft bought his company and gave him an excellent position within the company, currently CTO of Microsoft Azure: Mark Russinovich - Wikipedia
 

My Computer My Computer

At a glance

Windows 11, update 21H2 29/06/2021 10.0.22000.51Intel(R) Core(TM)2 Duo E8435 @ 3.06GHz8 GB DDR3Nvidia GForce GT 130
OS
Windows 11, update 21H2 29/06/2021 10.0.22000.51
Computer type
PC/Desktop
Manufacturer/Model
Apple iMac9,1
CPU
Intel(R) Core(TM)2 Duo E8435 @ 3.06GHz
Motherboard
Apple Inc. Mac-F2218FA9
Memory
8 GB DDR3
Graphics Card(s)
Nvidia GForce GT 130
Sound Card
Realtek HD audio
Monitor(s) Displays
Imac 2009 23"
Screen Resolution
1920x1200
Hard Drives
WDC WD1001FALS-40K1B0 SATA 1TB
PSU
Apple
Case
Aluminium (or is it Aluminum?)
Cooling
Fan
Keyboard
USB UK extended generic
Mouse
Novatech USB wheel optical mouse
Internet Speed
51.4 down 16.7 up ethernet
Browser
Chrome
Antivirus
MS Defender
Other Info
obtained secondhand from CEX 2018 £140

Latest Support Threads

Back
Top Bottom