NetworkCards Registry Key

The NetworkCards registry key will provide the name and interface GUID of the system's attached network interface adatpers.

Analysis Value

🖥️System Enumeration

Operating System Availability

Major Version
Support
Major Version
Support

Windows 11

✅

Server 2019

✅

Windows 10

✅

Server 2016

✅

Windows 8

✅

Server 2012

✅

Windows 7

✅

Server 2008

✅

Windows Vista

✅

Server 2003

✅

Windows XP

✅

Artifact Location(s)

  • File: %SystemRoot%\System32\config\SOFTWARE

  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards\*

Artifact Parsers

  • RegistryExplorer (Eric Zimmerman)

Artifact Interpretation

Each network interface adapter will have its own subkey with the following values:

  • Description: The name of the network adapter

  • ServiceName: The GUID of the network adapter

Examples

This example was produced on Windows Server 2019 Standard, Version 10.0.17763 Build 17763

This example was produced on Windows 10, Version 10.0.19044 Build 19044

Last updated