Endpoint Protection

 View Only
  • 1.  Host Integrity to check the registry key

    Posted Nov 17, 2014 07:50 AM

    Is it possible to check the registry key path through the Host Integrity policy or through any other policy in SEP. For scenario, I need to check for the machines connected to the SEPM which contains the below registry entry

     

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\msn.com\related

    Value:HTTP = 2

     



  • 2.  RE: Host Integrity to check the registry key
    Best Answer

    Posted Nov 17, 2014 11:32 AM
      |   view attached

    Did you go thru your other thread??

    https://www-secure.symantec.com/connect/forums/host-integrity-check-registry-entry

     



  • 3.  RE: Host Integrity to check the registry key

    Posted Nov 18, 2014 07:21 AM

    How to set condition for QWORD value



  • 4.  RE: Host Integrity to check the registry key

    Posted Nov 18, 2014 07:55 AM

    Just use the "Registry value exists" condition and set your value that you want checked.



  • 5.  RE: Host Integrity to check the registry key

    Posted Nov 18, 2014 08:19 AM

    Thank you. I will try that



  • 6.  RE: Host Integrity to check the registry key

    Posted Nov 18, 2014 08:37 AM

    It is working if I set for https but I need to set for the specific value for 4



  • 7.  RE: Host Integrity to check the registry key

    Posted Nov 19, 2014 06:28 AM

    I can set it for DWord values but It is not possible for Qword specific value it seems.