Critical System Protection

 View Only

  • 1.  Registry Keys

    Posted Dec 08, 2015 03:11 AM

    Hi,

    I'm new to SCSP i would like to know how can i use this software to prevent modification towards specific registry keys.

     

    Thanks!



  • 2.  RE: Registry Keys

    Posted Dec 08, 2015 03:58 AM

    Have a look SCSP Manuals for "About prevention watch rules".

    Have a look @ this article as well - https://www-secure.symantec.com/connect/articles/use-case-csp-file-watch

    The above article shows how to create a rule & you need to modify it slightly for registry keys instead of normal file.



  • 3.  RE: Registry Keys

    Posted Dec 08, 2015 10:44 PM

    Oh, okay thank you! But those are detection, can i know more about prevention instead? I'd tried to block modification towards a specific file with the prevention policy and it works, but it doesn't seem to work on a specific registry keys.