REG_CHECK

This policy item checks if the registry key (or item) exists or not. The check is performed by calling the functions RegOpenKeyEx and RegQueryValueEx.

Note: This check requires remote registry access for the remote Windows system to function properly.

Usage

<custom_item>

type: REG_CHECK

description: ["description"]

value_type: [VALUE_TYPE]

value_data: [value]

reg_option: [OPTION_TYPE]

(optional) check_type: [value]

(optional) key_item: [item value]

</custom_item>

The allowed types are:

value_type: POLICY_TEXT

value_data: "key path"

reg_option: MUST_EXIST or MUST_NOT_EXIST

key_item: "item name"

If the key_item field is not specified, this item checks that the key path exists. Otherwise, it checks that the item exists.

Example

<custom_item>

type: REG_CHECK

description: "Check the key HKLM\SOFTWARE\Adobe\Acrobat Reader\7.0\AdobeViewer"

value_type: POLICY_TEXT

value_data: "HKLM\SOFTWARE\Adobe\Acrobat Reader\7.0\AdobeViewer"

reg_option: MUST_NOT_EXIST

key_item: "EULA"

</custom_item>

Copyright © 2017. Tenable Network Security, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter Continuous View, Passive Vulnerability Scanner, and Log Correlation Engine are registered trademarks of Tenable Network Security, Inc. All other products or services are trademarks of their respective owners.