The talk will cover the basics of the Windows Registry and its structure, including the different hives (e.g. HKEY_LOCAL_MACHINE, HKEY_CURRENT_USER) and their purpose. We will then delve into the different ways the registry can be accessed, both locally and remotely, and the information that can be gleaned from these operations. We will also examine the potential information leakage that can occur and provide examples of interesting information that can be gathered from a remote system, such as installed software, configuration, and user activity. This information can be used by red teams to gain a deeper understanding of target systems, identify vulnerabilities, and plan successful attacks. We will share some interesting findings that we came across relating to information leakage, lateral movement possibilities via the registry (bypassing remote UAC), as well as ADCS (Active Directory Certificate Services).