Fabricating evidence - regentry

[MrPotato]

Hi, is it possible to fabricate an evidence basing on a windows registry entry?

I'm trying to trace devices having specific regentry value.

[erwinlindemann]

Hi "Mr Potato"

You can use the „IncludeRegistryKey“-Parameter for the Flexera agent for retrieving the value for specific registry key and uploading it together with other data in the NDI file.

This is documented in the GatheringFlexNetInventory document.

If you are working with the on-prem version of FNMS, you can use this value to either:

• populate an additional custom field on your Inventory
• produce additional evidence that can be used for application recognition

This will usually require doing some customization to the FNMS READER and WRITER XML files though.