Windows 10: Can we check event logs in the registry keys of operating system?

Hi All,This is regarding KB5025885 https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023-24932-41a975df-beb2-40c1-99a3-b3ff139f832d. We have applied the suggested changes on the endpoint and in order to verify that the remediation has been successfully applied, Microsoft suggested to look for some event logs on the eventvwr. So, we have our way of querying the eventvwr for the specific log given by Microsoft.But the querying the eventvwr takes time. So, we would like to know if there are an

:)

 

Modded Registry. Want Old Back....

did you try this

To restore the registry
Open Registry Editor.
Click Options, and then click Print to print these instructions. (If you are using the Help and Support Center, click Print above the topic area.) They will not be available after you shut down your computer in step 2.
Click Start, and then click Shut Down.
In the list, click Restart, and then click OK.
When you see the message Please select the operating system to start, press F8.
Use the arrow keys to highlight Last Known Good Configuration, and then press ENTER.
NUM LOCK must be off before the arrow keys on the numeric keypad will function.

Use the arrow keys to highlight an operating system, and then press ENTER.
Caution

Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on your computer.
Notes

To open Registry Editor, click Start, click Run, type regedit, and then click OK.
Choosing Last Known Good Configuration provides a way to recover from problems such as a newly added driver that may be incorrect for your hardware. It does not solve problems caused by corrupted or missing drivers or files.
When you choose Last Known Good Configuration, Windows restores information in registry key HKLM\System\CurrentControlSet only. Any changes you have made in other registry keys remain.

 

APPcrash event Logs

Hi Dennis,

Thank you for keeping us updated.

This issue may happen due to system file corruption. I suggest you to run System file checker. System File checker (SFC) scan is done to check if there are any corrupted system files that could be causing this issue. Kindly follow
the below given steps:

• Press Windows key + X, select
  Command prompt (Admin) to bring up elevated Command prompt.
• In Command prompt type sfc/scannow and press enter.
• Restart the computer.

If no corrupted system files were found in the previous state, then I suggest you to try the following steps:

• Open command prompt by pressing Windows key + X and selecting “Command prompt admin”.
• In command prompt, type the following commands and press Enter after each command:

DISM.exe /Online /Cleanup-image /Scanhealth

DISM.exe /Online /Cleanup-image /Restorehealth

• Close the command prompt and restart the PC and check if it works.

Please post back with the information asked and the results, we will be glad to assist you further.

 

Error Removing Registry Key?

If it is not causing you any issues i would suggest for you you not alter the Registry.

Altering the Registry in any form of way may cause your Operating System to stop responding and or functioning.