| Plugin | Hive | What it gives |
|---|---|---|
| execpolicy | SOFTWARE | PowerShell execution policy |
| pslogging | SOFTWARE / NTUSER | Logging settings |
| powershellcore | SOFTWARE | PowerShell Core config |
| psscript | SOFTWARE / NTUSER | PSScript.ini |
| wsh_settings | SOFTWARE | Windows Script Host settings |
BLUE TEAM / DFI / ARTEFACT / WINDOWS / REGISTRY / RegRipper