Chronicle V1 API - Module Google::Backstory::Registry::Type (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API module Google::Backstory::Registry::Type.

Type of the registry value. These values are based on the Windows Registry value types: https://learn.microsoft.com/en-us/windows/win32/sysinfo/registry-value-types

Constants

TYPE_UNSPECIFIED

value: 0
Default registry value type used when the type is unknown.

NONE

value: 1
The registry value is not set and only the key exists.

SZ

value: 2
A null-terminated string.

EXPAND_SZ

value: 3
A null-terminated string that contains unexpanded references to environment variables

BINARY

value: 4
Binary data in any form.

DWORD

value: 5
A 32-bit number.

DWORD_LITTLE_ENDIAN

value: 6
A 32-bit number in little-endian format.

DWORD_BIG_ENDIAN

value: 7
A 32-bit number in big-endian format.

value: 8
A null-terminated Unicode string that contains the target path of a symbolic link.

MULTI_SZ

value: 9
A sequence of null-terminated strings, terminated by an empty string

RESOURCE_LIST

value: 10
A device driver resource list.

QWORD

value: 11
A 64-bit number.

QWORD_LITTLE_ENDIAN

value: 12
A 64-bit number in little-endian format.