Custom Relevance Required

1

Hi,

I have the below relevance for finding registry value,
“q: value “PreferredGroup” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink” of native registry
A: My Company\Default Group
T: 0.083 ms”

I have multiple answer like “A: My Company\USB Allow” , “A: My Company\USB Block” , “A: My Company\Test” , “A: My Company\Device Control” , “A: My Company\Device Enable” , “A: My Company\Default Test”,

can I get the reports like “Enable” (or) “Disable” , using If condition,

for example when i get the answer "My Company\Default Group, My Company\USB Allow, My Company\Test, My Company\Device Control, My Company\Device Enable, My Company\Default Test, mean, the result is getting “Enable”

when I get the answer “My Company\USB Block” mean the result is “Disable” ,

how can I create a property for the above scenario, please share any idea,

Thanks,
Nagaraj,

2

if exists value “PreferredGroup” whose (it as string contains “Block” of it) of key “HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink” of registry then “Disable” else “Enable”

3

Hi,
Thanks, I will check the above content,

Thanks,
Nagaraj,