ECS::LogEntry::Registry
Inherits JSON::Serializable < Struct < Value < Object
Constructors
new(pull : JSON::PullParser)
Sourcenew(*, __pull_for_json_serializable pull : JSON::PullParser)
SourceInstance methods
data
Sourcedata=(data : Data | Nil)
Sourcehive=(hive : String | Nil)
registry.hive
Abbreviated name for the hive.
Level: Core Type: Keyword Example:
HKLM
key
registry.key
Hive-relative path of keys.
Level: Core Type: Keyword Example:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe
key=(key : String | Nil)
registry.key
Hive-relative path of keys.
Level: Core Type: Keyword Example:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe
path
registry.path
Full path, including hive, key and value
Level: Core Type: Keyword Example:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe\Debugger
path=(path : String | Nil)
registry.path
Full path, including hive, key and value
Level: Core Type: Keyword Example:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winword.exe\Debugger
value=(value : String | Nil)
registry.value
Name of the value written.
Level: Core Type: Keyword Example:
Debugger