Post

Dump SAM, SYSTEM and SECURITY

Demonstration of how dump SAM, SYSTEM and SECURITY registry files.

Prerequisites

Ensure you have access to an Admin level command prompt.

Dump Files

1
2
3
reg.exe save hklm\sam sam.sav
reg.exe save hklm\system system.sav
reg.exe save hklm\security security.sav
  • sam.sav, system.sav and security.sav are the names of the output files.
  • The files will be saved in your current working directory if no path is given.
This post is licensed under CC BY 4.0 by the author.