Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

RegistryValueTypeWin Registry Key Object Schema

The RegistryValueType type is intended to characterize Windows registry Value name/data pairs.

Fields

Field Name Type Description
Name0..1 StringObjectPropertyType

The Name field specifies the name of the registry value. For specifying the default value in a registry key, an empty string should be used.

Data0..1 StringObjectPropertyType

The Data field specifies the data contained in the registry value.
Datatype0..1 RegistryDatatypeType

The Datatype field specifies the registry (REG_*) datatype used in the registry value.
Byte_Runs0..1 ByteRunsType

The Byte_Runs field contains a list of byte runs from the raw registry key entry.