RegValues

To fill this table you need to configure the scan to retrieve registry values (Windows section). To do this, copy for each value, the path and the name from regedit and merge them as follows: %pathname%\%ValueName%.

Data field

Data type

Data description

id_snapshot

number

Identifier of the network snapshot.

server_name

string

Netbios name of the server without the two preceding backslash characters.

RegPath

string

Registry path of the key/value

ValueData

string

Data in the key/value

ValueType

number

Type of the value (see Appendix)

Appendix registry value types

Number

Symbolic name

Description

0

REG_NONE

No value type

1

REG_SZ

Unicode nul terminated string

2

REG_EXPAND_SZ

Unicode nul terminated string (with environment variable references)

3

REG_BINARY

Free form binary

4

REG_DWORD

32-bit number

4

REG_DWORD_LITTLE_ENDIAN

32-bit number (same as REG_DWORD)

5

REG_DWORD_BIG_ENDIAN

32-bit number

6

REG_LINK

Symbolic Link (unicode)

7

REG_MULTI_SZ

Multiple Unicode strings

8

REG_RESOURCE_LIST

Resource list in the resource map

9

REG_FULL_RESOURCE_DESCRIPTOR

Resource list in the hardware description

10

REG_RESOURCE_REQUIREMENTS_LIST

 

11

REG_QWORD

64-bit number

11

REG_QWORD_LITTLE_ENDIAN

64-bit number (same as REG_QWORD)