[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISSForum] Server Sensor User Defined Event

Hello,

I want to configure a user defined event on Server Sensor 6.5 to monitor
any changes on the keys:

\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\HKEY_USERS\.DEFAULT\Sodtware\Microsoft\Windows\CurrentVersion\Run

How can I do that ?
Which values must I insert on Origin, Type, Category, ID and Regular
Expression  fields ?

Fernando


_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo