Hello,
how can I search for an entry in the registry if the entry is under HKEY_USERS? The exact path changes to the respective SID HKEY_USERS\S-1-5-25-2626331963-3573278992-2181189124-1400\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
When I put a wildcart there (HKEY_USERS\*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts) it is not found. I can't get it through a report, nor through file & registry scanning.
