# how to get a MacAddress from Registry(win10, 11)

**URL:** <https://sleuthkit.discourse.group/t/how-to-get-a-macaddress-from-registry-win10-11/3974>\
**Category:** Autopsy Help\
**Created:** [October 6, 2023, 12:43pm UTC](https://sleuthkit.discourse.group/t/how-to-get-a-macaddress-from-registry-win10-11/3974 "2023-10-06T12:43:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![styx](https://avatars.discourse-cdn.com/v4/letter/s/898d66/32.png) [@styx](https://sleuthkit.discourse.group/u/styx)\
**Post date:** [October 6, 2023, 12:43pm UTC](https://sleuthkit.discourse.group/t/how-to-get-a-macaddress-from-registry-win10-11/3974/1 "2023-10-06T12:43:41Z")

</div>

It doesn’t fit the category, but there’s no place to ask, so I’m asking here. I’m sorry.

I want to check the MAC Address of the network card through registry analysis. (Windows 10, 11)  
as I know,  
to get a Mac Address, Find [BIMacAddress\_h] and [BIMacAddress\_i] in [\HKEY\_LOCAL\_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces~].  
so I checked [\HKEY\_LOCAL\_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces~] & [0002] is the one i looking for.  
However, no matter how much I look for registry files extracted from my desktop (Win 10) and laptop (Win 11),  
BIMacAddress\_h and BIMacAddress\_i don’t exist at all.  
Is there a reason why I don’t have this key? In this case, how should I check it?

Help me~!