diff --git a/docs/public/windows/index.rst b/docs/public/windows/index.rst
index 4d81237..58f5af3 100644
--- a/docs/public/windows/index.rst
+++ b/docs/public/windows/index.rst
@@ -15,3 +15,14 @@ Prevent short session lock timeout
      shell.sendkeys("{NUMLOCK}{NUMLOCK}")
      wscript.sleep(1000*59)
  loop
+
+Virtualization registry keys
+----------------------------
+
+HKEY_LOCAL_MACHINE
+
+* SYSTEM\\ControlSet001\\Services\\hvservice
+* SYSTEM\\ControlSet001\\Control\\DeviceGuard
+* SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard
+
+.. todo:: find out critical ones