Extracting Data from registry unknown the location of it

This should pull the DIsplayName and DisplayVersion (its checking both the native and x86 redirected registry hives). You can add other any registry values that may exist for that particular application.

(values "DisplayName" of it, values "DisplayVersion" of it) of keys whose (value "DisplayName" of it as string as lowercase contains "cylance") of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (registry;native registry)

2 Likes