Modified or accessed time of registry values?

Content Authoring
1

(imported topic written by RP12)

I have used BigFix to check modified times and accessed times of specific files. Is there a way that it can check the accessed and modified times of values in the registry?

2

(imported comment written by RP12)

I should’ve included this info too

I can see this value

Q: exists value “Seed” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG” of registry as string

A:True

But I want to find out when it was last modifed, so I tried the same format for a specific file.

Q: ((now - Accessed time of value “Seed” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG”)/day) of registry as string & " days ago"

E: The operator “key” is not defined.

I tried tweaking it, but the results were similar.

3

(imported comment written by BenKus)

Hi RP,

The Windows Registry doesn’t store access/modification times like the file system does. I don’t know of anyway to perform a function like that.

Ben