Changeset 303
- Timestamp:
- 05/04/07 22:14:24 (2 years ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
honeyclient/branches/exp/kindlund-filesystem/etc/honeyclient.xml
r296 r303 128 128 <Filesystem> 129 129 <directories_to_check description="List of base directories on the filesystem to recursively analyze. Use a regular slash (/) instead of a backslash (\) as a directory separator character."> 130 <!-- TODO: FIX THIS --> 131 <name>C:/Temp</name> 130 <name>C:/</name> 132 131 </directories_to_check> 133 132 <exclude_list description="List of regular expressions that match files/directories to exclude from analysis. These entries match files/directories that change normally during the course of driving the target application. As such, they are excluded from analysis in order to reduce false positives. Use a regular slash (/) instead of a backslash (\) as a directory separator character. Never prefix any entry with a carat (^) before the drive letter, such as '^C:/', and never add the regex suffix ($) to the end of an expression, such as 'C:/Temp$'. All comparisons are case-insensitive."> … … 172 171 <Registry> 173 172 <hives_to_check description="List of registry hives to analyze."> 174 <!-- TODO: FIX THIS --> 175 <!-- <name>HKEY_LOCAL_MACHINE</name> 176 <name>HKEY_CLASSES_ROOT</name> --> 173 <name>HKEY_LOCAL_MACHINE</name> 174 <name>HKEY_CLASSES_ROOT</name> 177 175 <name>HKEY_CURRENT_USER</name> 178 < !-- <name>HKEY_USERS</name>179 <name>HKEY_CURRENT_CONFIG</name> -->176 <name>HKEY_USERS</name> 177 <name>HKEY_CURRENT_CONFIG</name> 180 178 </hives_to_check> 181 179 <exclude_list description="List of perl regular expressions, each matching one or more registry key directory names to exclude from analysis. These entries match registry key directories that change normally during the course of driving the target application. As such, they are excluded from analysis in order to reduce false positives. As in normal regular expressions, each backslash (\) must be escaped (\\) and each regex must not end with any backslash character.">
