Fix reg.py to work with the registry properly #25618
Labels
Bug
broken, incorrect, or confusing behavior
Execution-Module
P3
Priority 3
Platform
Relates to OS, containers, platform-based utilities like FS, system based apps
severity-medium
3rd level, incorrect or bad functionality, confusing and lacks a work around
State-Module
Windows
Milestone
The current reg.py thinks of registry keys as if they were python keys in a dictionary which is not the case. The windows registry is broken down into the following components:
Hives
This is the top level of the registry. They all begin with HKEY.
Keys
Hives contain keys. These are basically the folders beneath the hives. They can contain subkeys.
Values
Values are the name/data pairs beneath the keys and subkeys.
The following example is taken from the windows startup portion of the registry:
In this example these are the values for each:
Hive:
HKEY_LOCAL_MACHINE
Key and subkeys:
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: There are 3 values:
RTHDVCPL
,NvBackend
, andBTMTrayAgent
The way reg.py works right now it does not differentiate between values and keys. It sees everything as a value.
The text was updated successfully, but these errors were encountered: