I've been seeing cases where they use syskey to password-lock the registry as a ransomware technique - youtube.com/watch?v=lsb9JdXL…