Genian EDR

Download 49
Last updated Aug 6, 2023

Registry log

Normalize registry logs in Genian EDR.

TypeFieldDisplay Name
DATE_timeTime
STRINGevent_typeEvent type
STRINGevent_subtypeEvent subtype
INTimportantImportant level
IPhost_ipHost IP
STRINGnt_domainNT domain
STRINGhostnameHostname
STRINGtagTag
STRINGimageProcess name
STRINGimage_pathProcess path
STRINGreg_key_pathRegistry key path
STRINGreg_value_nameRegistry value name
STRINGreg_valueRegistry value
STRINGreg_value_typeRegistry value type
INTreg_value_sizeRegistry value size
STRINGlogon_idLogon ID
INTpidPID
STRINGpguidProcess GUID
STRINGdevice_idDevice ID
LONGevent_seqEvent sequence