Dear All,
Is there an up-to-date reference manual for nasl ?
I tried to improve the plugin 21725 (Symantec Anti-Virus check) so it
will check that the anti-virus is not disabled while it is running
I added after line 252:
key = "SOFTWARE\Symantec\Symantec Endpoint
Protection\AV\Storages\Filesystem\RealTimeScan\";
item = "OnOff";
key_h = RegOpenKey(handle:hklm, key:key, mode:MAXIMUM_ALLOWED);
if ( ! isnull(key_h) ) {
value = RegQueryValue(handle:key_h, item:item);
RegCloseKey(handle:key_h);
if ( value[1] != 1 ) { running = 0; }
}
key = "SOFTWARE\Symantec\Symantec Endpoint
Protection\AV\Storages\InternetMail\";
item = "OnOff";
key_h = RegOpenKey(handle:hklm, key:key, mode:MAXIMUM_ALLOWED);
if ( ! isnull(key_h) ) {
value = RegQueryValue(handle:key_h, item:item);
RegCloseKey(handle:key_h);
if ( value[1]) != 1 ) { running = 0; }
}
But now I have no result when the plugin is launched. I'm not sure
about the registry functions I use, that's why I'm asking if there is
a document that could details those functions (RegOpenKey,
RegQueryValue etc.)
--
David ROBERT
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
Is there an up-to-date reference manual for nasl ?
I tried to improve the plugin 21725 (Symantec Anti-Virus check) so it
will check that the anti-virus is not disabled while it is running
I added after line 252:
key = "SOFTWARE\Symantec\Symantec Endpoint
Protection\AV\Storages\Filesystem\RealTimeScan\";
item = "OnOff";
key_h = RegOpenKey(handle:hklm, key:key, mode:MAXIMUM_ALLOWED);
if ( ! isnull(key_h) ) {
value = RegQueryValue(handle:key_h, item:item);
RegCloseKey(handle:key_h);
if ( value[1] != 1 ) { running = 0; }
}
key = "SOFTWARE\Symantec\Symantec Endpoint
Protection\AV\Storages\InternetMail\";
item = "OnOff";
key_h = RegOpenKey(handle:hklm, key:key, mode:MAXIMUM_ALLOWED);
if ( ! isnull(key_h) ) {
value = RegQueryValue(handle:key_h, item:item);
RegCloseKey(handle:key_h);
if ( value[1]) != 1 ) { running = 0; }
}
But now I have no result when the plugin is launched. I'm not sure
about the registry functions I use, that's why I'm asking if there is
a document that could details those functions (RegOpenKey,
RegQueryValue etc.)
--
David ROBERT
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers