Drivers - Windows - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1Drivers - Windows4/24/2016 7:43:39 PM
2Drivers - Windows5/10/2016 6:37:06 AM
3Drivers - Windows7/19/2016 5:50:05 PM

Description

This analysis covers the action that Windows takes when loading drivers with invalid or missing digital signatures as well as the install printer drivers on the system.

Property Details

ID2997990
StatusAlpha - Code that was just developed
TitleDrivers - Windows
DomainBESC
KeywordsC3 Inventory
Added by on 4/24/2016 7:43:39 PM
Last Modified by on 4/24/2016 7:43:39 PM
Counters 911 Views / 5 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Drivers - Behavior on Signature Failure - Windows
Period Every Report
 
  * Results in a true/false
Show indented relevance
(if (it = "00") then ("Ignore") else (if (it = "01") then "Warn" else "Block")) of (value "Policy" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver Signing" of native registry as string)
Drivers - Printers - Windows
Period Every Report
 
  * Results in a true/false
Show indented relevance
unique values of names of keys of keys of keys "Drivers" of keys of key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Environments" of native registry
Drivers - Printers with Versions - Windows
Period Every Report
 
  * Results in a true/false
Show indented relevance
(names of it, value "DriverVersion" of it as string) of keys of keys of keys "Drivers" of keys of key "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Environments" of native registry

Relevance

Used in 27 fixlets and 130 analyses   * Results in a true/false
Show indented relevance
NOT in proxy agent context
Used in 3 fixlets and 9 analyses   * Results in a true/false
Show indented relevance
windows of operating system and version of operating system >= "5.1"

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!