The content or configuration of a registry object was modified
| Parameter | Value |
|---|
| Subject | registry |
| Activity | modify |
| Activity Type | registry-modify |
| Pretty Name | Registry Modify |
| Success | Fail |
|---|
registry-write
| registry-write
|
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|
| old_registry_details_type | | ✓ | |
| old_registry_details | | ✓ | |
| cid | | | ✓ |
| Field | Core | Detection | Informational |
|---|
| failure_code | | ✓ | |
| old_registry_details_type | | ✓ | |
| failure_reason | | ✓ | |
| old_registry_details | | ✓ | |
| cid | | | ✓ |