Registry related relevance syntax

Content Authoring
1

(imported topic written by smamm91)

Can someone give me some pointers on how to properly format this relevance string?

(exists key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup” whose (exists value “DRM”) whose (it as string contains "“C:\Documents and Settings\All Users\DRM* /s\0”) of it)

I need to query for a value that is an exact match for “C:\Documents and Settings\All Users\DRM* /s\0”

2

(imported comment written by BenKus)

Try this:

(exists key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup” whose (exists value “DRM” of it AND value “DRM” of it as string contains “C:\Documents and Settings\All Users\DRM* /s\0”) of registry)

I removed a quote from there, but you can add it back using %22 like this:

(exists key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup” whose (exists value “DRM” of it AND value “DRM” of it as string contains “%22C:\Documents and Settings\All Users\DRM* /s\0”) of registry)

Ben

3

(imported comment written by smamm91)

Thanks - small syntax errors can be a killer. Relevancy is checking in correctly now.