Key

The Key class describes a Windows operating system registry key name and value pair, as well as the operation performed on it.

digraph Key { graph [bb="0,0,222,134", rankdir=LR ]; node [label="\N"]; Key [height=1.8611, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/Key.html" TITLE="The Key class describes a Windows operating system registry key name and value pair, as well as the operation performed on it. "><FONT FACE="Nimbus Sans L">Key</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/Key.html" TITLE="The name of a Windows operating system registry key (e.g., [HKEY_LOCAL_MACHINE\Software\Test\KeyName])."><FONT FACE="Nimbus Sans L">[STRING] KeyName (1..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Key.html" TITLE="The value of the registry key identified in the KeyName class encoded per the .reg file format [KB310516]."><FONT FACE="Nimbus Sans L">[STRING] KeyValue (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Key.html" TITLE="The type of action taken on the registry key. These values are maintained in the &quot;Key-registryaction&quot; IANA registry per Section 10.2."><FONT FACE="Nimbus Sans L">[ENUM] registryaction (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Key.html" TITLE="A means by which to extend the registryaction attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-registryaction (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Key.html" TITLE="See Section 3.3.2."><FONT FACE="Nimbus Sans L">[ID] observable-id (0..1)</FONT></td></tr>%</table>>, pos="111,67", shape=plaintext, width=3.0833]; }


Aggregates

KeyName (1..1)

The name of a Windows operating system registry key (e.g., [HKEY_LOCAL_MACHINE\Software\Test\KeyName]).

KeyValue (0..1)

The value of the registry key identified in the KeyName class encoded per the .reg file format [KB310516].

registryaction (0..1)

The type of action taken on the registry key. These values are maintained in the "Key-registryaction" IANA registry per Section 10.2.

ext-registryaction (0..1)

A means by which to extend the registryaction attribute. See Section 5.1.1.

observable-id (0..1)

See Section 3.3.2.



IDMEFv1


IDMEFv2


IODEFv1


IODEFv2