Default language.

discovery.listRegistry


discovery.listRegistry(target, key_path [, win64_redirect=true|false])


Returns a list of the registry entries of the registry key specified by the key_path.

The function takes the following parameters:

  • target, where target is:
  • key_path – the path to the required registry key.
  • win64_redirect is an optional flag which enables you to specify whether the search for the registry key should take place in the 32 bit section if not found in the 64 bit section. TRUE means search the 32 bit section, FALSE means do not search the 32 bit section even if the key is not found in the 64 bit section. The default is TRUE.

64 bit Windows hosts have the following registry keys:

  • HKEY_LOCAL_MACHINE\SOFTWARE — 64 bit values
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node — 32 bit values

On non-Windows and 32 bit Windows systems win64_redirect has no effect.

Returns a list of DiscoveredRegistryEntry nodes. If the call fails, it returns none and records the failure reason in the RegistryListing node.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*