Quantcast
Channel: Symantec Connect - Client Management Suite - Discussions
Viewing all articles
Browse latest Browse all 2021

Detection Rules OK for string, version, not for DWORD registry value ???

$
0
0
I need a solution

I try to include a detection rule, as I do often, no problem, but this time, I check a DWORD, not a string... And never detected, all the same registry there !!

Yes, I do type the command line as "install", not a custom (no check)

I make a few tries, FOR:

  • Registry Key Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
  • Registry entry: minRSAPubKeyBitLength

I put "registry Key Value" to match:

  • Substring: c8
  • entire string: 000000c8, x000000c8, dword:000000c8

No way, no detection, How did you do ? Id you do !


Viewing all articles
Browse latest Browse all 2021

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>