Extentrix Registry Key Scan

Scan description

 

Scan Name: Extentrix Registry Key Scan.

 

Description: It allows IT administrators to scan the client's machine and verify whether a specified registry key/value is registered on that machine or not.   

  

Parameters: 

·        Base Registry Key: specifies the base registry key.

·        Sub Key: specifies the sub key ex: Software\\Extentrix.

·        Value Name: specifies the name of the value (NULL if you are looking for a key).

·        Value Type: specifies the type of the value (NULL if you are looking for a key).

·        Value Data: specifies the data of the value (NULL if you are looking for a key). Data could be REG_SZ à String, REG_BINARY à Binary, REG_DWORD à Double Word.

 

Note: If the data is binary or dword, it should be written as     hexadecimal without space ex:05f47e.

 

 

Scan Output:

·        Allow Access - a Boolean output which indicates whether the key or the value is registered on the client's machine or not.

 

TRUE   – indicates that a given key/value is registered on the client's machine.

FALSE – indicates that a given key/value is not registered on the client's machine or contains wrong information.

 

·        License Status- a String output which indicates whether the scan is licensed or not.

 

TRIAL LICENSE    – indicates that the scan has a trial license.

INVALID LICENSE – indicates that the scan hasn’t a license.

VALID LICENSE    – indicates that the scan is licensed.

 

Note: If the License Status has an Invalid License value, the Allow Access will be false.

Installation and configuration

Importing scan packages

To install a custom end point analysis scan package follow the following steps:

1.      After opening Citrix Access Management Console, in the console tree select the Endpoint Analysis node.

2.      Right click any of the displayed scan packages categories and select Import scan package from the drop down menu list.

 

Also you can choose to insert the scan package to any scan category listed in the tree as shown in the following picture:

 

 

3.      A dialog box named “Select Scan Package File” will appear. Double click on the (.cab) file which contains the Scan.  

 

The package will be displayed in the console as shown in the following picture:

 

 

 

Installing the scan package

Please follow the steps below to create scans and rules for the Extentrix Registry Key Scan.

1.      Select ExtentrixRegistryKeyScan to create scan for it, right click the icon and choose Create Scan.

 

2.      Type a name for the scan:

 

3.      Set the scan conditions:

 

4.      Type rule name and set rule conditions:

 

 

 

5.      Choose a base registry key from the list:

 

6.      Type the sub key to be checked.

 

7.      Type the Value Name if you will check the value or NULL if you will not.

 

8.      Choose the Type of the data from the list:

 

9.      Type the data of the value: if the data is binary or dword it should be written as hexadecimal without space ex: 05f47e.

 

 

 

And if the data type is string then you can use wild char.

 

                          

 

10.  When you are done, click Finish.