Changeset 379

Show
Ignore:
Timestamp:
05/25/07 18:35:14 (1 year ago)
Author:
kindlund
Message:

Back to reg integrity scope.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/branches/exp/kindlund-filesystem/etc/honeyclient.xml

    r374 r379  
    131131            <Filesystem> 
    132132                <directories_to_check description="List of base directories on the filesystem to recursively analyze.  Use a regular slash (/) instead of a backslash (\) as a directory separator character."> 
    133                     <!-- <name>C:/</name> --> 
    134                     <name>C:/Temp</name> 
     133                    <name>C:/</name> 
    135134                </directories_to_check> 
    136135                <exclude_list description="List of regular expressions that match files/directories to exclude from analysis.  These entries match files/directories that change normally during the course of driving the target application.  As such, they are excluded from analysis in order to reduce false positives.  Use a regular slash (/) instead of a backslash (\) as a directory separator character.  Never prefix any entry with a carat (^) before the drive letter, such as '^C:/', and never add the regex suffix ($) to the end of an expression, such as 'C:/Temp$'.  All comparisons are case-insensitive."> 
    …… 
    178177            <Registry> 
    179178                <hives_to_check description="List of registry hives to analyze."> 
    180                     <!-- <name>HKEY_LOCAL_MACHINE</name> 
    181                     <name>HKEY_CLASSES_ROOT</name> --> 
     179                    <name>HKEY_LOCAL_MACHINE</name> 
     180                    <name>HKEY_CLASSES_ROOT</name> 
    182181                    <name>HKEY_CURRENT_USER</name> 
    183                     <!-- <name>HKEY_USERS</name> 
    184                     <name>HKEY_CURRENT_CONFIG</name> --> 
     182                    <name>HKEY_USERS</name> 
     183                    <name>HKEY_CURRENT_CONFIG</name> 
    185184                </hives_to_check> 
    186185                <exclude_list description="List of perl regular expressions, each matching one or more registry key directory names to exclude from analysis.  These entries match registry key directories that change normally during the course of driving the target application.  As such, they are excluded from analysis in order to reduce false positives.  As in normal regular expressions, each backslash (\) must be escaped (\\) and each regex must not end with any backslash character.">