Control Compliance Suite

 View Only

  • 1.  How to query about registry key or value?

    Posted Apr 23, 2015 05:47 PM

    Dears, greeting...

    i'm using CCS 11

    i'm trying to create a query about registry key and value,but always i'm getting no data , what i want to query about is exist in the below path:

     

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec=537395248 

     

    as i need to check for the value NTLMMinServerSec is equal to 537395248 

     

    if i was luck, i will create a check for this.

     

    your help is appreciated 



  • 2.  RE: How to query about registry key or value?

    Posted Jun 08, 2015 04:42 PM

    If you are building a check in a standard it should look like this:

    Registry Value as a String = 537305248 Where Registry Key\Value Path = HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec

    If you just want to check what the value is, then build a query and choose the Registry as the data source.  Include the Registry Key\ Value field and then in the Select Scope part choose the "Scope to a registry Key" and make sure the Registry Hive is set to "HKLM"  and the Registry Key is set to "System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec"  Then run the query.

    Hope that helps.