Just as a side thought for furture, this could stop working for the Windows OS in a scenario where the vendor changes the display name. Knowing a bit of the background of Carbon Black App Control, it used to be called Bit9, then became Carbon Black Protect, then after VMWare aquired CarbonBlack it was rebranded as App Control. Throughout those 3 branding changes however, the service name has remained consistent, “parity”. Inspecting the version of the Windows service could be a more resilient approach than looking at registry keys.
Q: (if (windows of it) then (version of service "parity" as string | "Not Installed") else (if(mac of it) then (version of applications whose (name of it as lowercase contains "b9notifier") as string | "Not Installed") else (nothing))) of operating system
A: Not Installed