STIX Wiki
STIX Wiki

Overview

IntroductionGetting StartedWalkthrough

Reference

Domain Objects
Relationship Objects
Cyber-observable Objects
ArtifactAutonomous System (AS)DirectoryDomain NameEmail AddressEmail MessageFileIPv4 AddressIPv6 AddressMAC AddressMutexNetwork TrafficProcessSoftwareURLUser AccountWindows™ Registry Key ObjectX.509 Certificate
Meta Objects
Bundle Object
Cyber-observable Objects

Windows™ Registry Key Object

The Registry Key object represents the properties of a Windows registry key. As all properties of this object are optional, at least one of the properties defined below MUST be included when using this object.

  • TODO: Add extensions
  • TODO: Add examples

Properties

Required Common Properties
typeid
Optional Common Properties
spec_versionobject_marking_refsgranular_markingsdefangedextensions
Not Applicable
created_by_refrevokedlabelsconfidencelangexternal_references
Windows Registry Key Specific
keyvaluesmodified_timecreator_user_refnumber_of_subkeys
PropertyTypeDescription
typeoptional
stringThe value of this property MUST be `windows-registry-key`.
keyoptional
stringSpecifies the full registry key including the hive.
valuesoptional
list of objectSpecifies the values found under the registry key.
modified_timeoptional
stringSpecifies the last date/time that the registry key was modified.
creator_user_refoptional
stringSpecifies a reference to a user account, represented as a User Account Object, that created the registry key.
number_of_subkeysoptional
integerSpecifies the number of subkeys contained under the registry key.

User Account

Previous Page

X.509 Certificate

Next Page

On this page

Properties