Reg.Discovery_x86

KL.KSC.Reg.Discovery_x86 (Discovery)

Element properties:

Target	Microsoft.Windows.Computer
Enabled	True
Frequency	21600
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
KL.KSC.Reg ServerId

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.FilteredRegistryDiscoveryProvider	Default

Source Code:

<Discovery ID="KL.KSC.Reg.Discovery_x86" Target="Windows!Microsoft.Windows.Computer" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>PerformanceCollection</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="KL.KSC.Reg">

      <Property TypeID="KL.KSC.Reg" PropertyID="ServerId"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>KeyExists</AttributeName>

        <Path>SOFTWARE\KasperskyLab\Components\34\1093\1.0.0.0\ServerFlags\ServerID</Path>

        <PathType>1</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>ServerId</AttributeName>

        <Path>SOFTWARE\KasperskyLab\Components\34\1093\1.0.0.0\ServerFlags\ServerID</Path>

        <PathType>1</PathType>

        <AttributeType>1</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>21600</Frequency>

    <ClassId>$MPElement[Name="KL.KSC.Reg"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="KL.KSC.Reg"]/ServerId$</Name>

          <Value>$Data/Values/ServerId$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery Type="Boolean">Values/KeyExists</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value Type="Boolean">true</Value>

        </ValueExpression>

      </SimpleExpression>

    </Expression>

  </DataSource>

</Discovery>