Regedit.exe

Used by Windows to manipulate registry

ADS

Hide registry data in alternate data stream

regedit /E {PATH_ABSOLUTE}:regfile.reg HKEY_CURRENT_USER\MyCustomRegKey

Export the target Registry key to the specified .REG file. — MITRE: T1564.004 — Privileges: User

Import hidden registry data from alternate data stream

regedit {PATH_ABSOLUTE}:regfile.reg

Import the target .REG file into the Registry. — MITRE: T1564.004 — Privileges: User