How does the VigilEnt Security Agent for Windows Detect Service display types of file or registry ac (NETIQKB31717)

  • 7731717
  • 02-Feb-2007
  • 08-Sep-2008

Resolution

goal
How does the VigilEnt Security Agent for Windows Detect Service display types of file or registry access changes?

fact
VigilEnt Security Agent for Windows 3.X

fact
VigilEnt Security Agent for Windows 4.0

fix
Below is a list of file and registry attributes as they appear in a VigilEnt Security  Agent for Windows Detect alert as %%[number].

READ_CONTROL: 1538
DELETE: 1537
READDATA: 4416
READEA: 4419
READAttributes: 4423
WRITEDATA: 4417
APPENDDATA: 4418
WRITEEA: 4420
WRITEAttribute: 4424
WRITE_OWNER: 1540(take ownership)
WRITE_DAC: 1539(change permission)



Additional Information

Formerly known as NETIQKB31717