Some users may experience issues accessing the case portal. For more information, please click here.

This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
MrPotato
Level 6
‎Feb 20, 2020 02:16 AM

Fabricating evidence - regentry

Hi, is it possible to fabricate an evidence basing on a windows registry entry?

I'm trying to trace devices having specific regentry value.

Labels (2)

This thread has been automatically locked due to inactivity.

To continue the discussion, please start a new thread.
1 Reply
erwinlindemann
Level 9 Champion
Level 9 Champion
‎Feb 20, 2020 04:04 AM

Hi "Mr Potato"

You can use the „IncludeRegistryKey“-Parameter for the Flexera agent for retrieving the value for specific registry key and uploading it together with other data in the NDI file.

This is documented in the GatheringFlexNetInventory document.

If you are working with the on-prem version of FNMS, you can use this value to either:

  • populate an additional custom field on your Inventory
  • produce additional evidence that can be used for application recognition

This will usually require doing some customization to the FNMS READER and WRITER XML files though.