TOC & Recently Viewed

Recently Viewed Topics

REG_CHECK

This policy item checks if the registry key (or item) exists or not. The check is performed by calling the functions RegOpenKeyEx and RegQueryValueEx.

Note: This check requires remote registry access for the remote Windows system to function properly.

Usage

<custom_item>

type: REG_CHECK

description: ["description"]

value_type: [VALUE_TYPE]

value_data: [value]

reg_option: [OPTION_TYPE]

(optional) check_type: [value]

(optional) key_item: [item value]

</custom_item>

The allowed types are:

value_type: POLICY_TEXT

value_data: "key path"

reg_option: MUST_EXIST or MUST_NOT_EXIST

key_item: "item name"

If the key_item field is not specified, this item checks that the key path exists. Otherwise, it checks that the item exists.

Example

<custom_item>

type: REG_CHECK

description: "Check the key HKLM\SOFTWARE\Adobe\Acrobat Reader\7.0\AdobeViewer"

value_type: POLICY_TEXT

value_data: "HKLM\SOFTWARE\Adobe\Acrobat Reader\7.0\AdobeViewer"

reg_option: MUST_NOT_EXIST

key_item: "EULA"

</custom_item>

Copyright 2017 - 2018 Tenable, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc. Tenable, Tenable.io, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.