Data Loss Prevention

 View Only
  • 1.  Registry Key for DLP

    Posted Jan 21, 2010 09:46 AM
    hey gang,

    What is the windows registry key that I should look for to check to see if DLP is running on the host??

    -virusdefender


  • 2.  RE: Registry Key for DLP
    Best Answer

    Posted Jan 22, 2010 05:45 AM
    The Security officer can decide what would be the name of the service's that are installed on the endpoint. so you should check what are the services thar were decided.

    if you would like to see if the DLP is insalled on the system then:

    1) check for processes:    wdp.exe and edpa.exe

    2) in the registry go to:      HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\<Service Name>\imagepath
         the value would be the folder where the agent is insalled and the process wdp/edpa


    3) check for the folder:      <C>\Program Files\Manufacturer\Endpoint Agent