Jump to content

HIPS registry Rules not work at Services


Go to solution Solved by itman,

Recommended Posts

Hi dears.

We have problem with HIPS registry rules in services :

We create a HIPS block rule to prevent modification in:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Start

But it seems that ESET can not apply HIPS registry rules in this address.

it seems that any rule apply to HKEY_LOCAL_MACHINE\SYSTEM\ will not work.

ESET Version : Endpoint Security 8.0.2028.0 - Windows 10

 

Edited by kamiran.asia
Link to comment
Share on other sites

  • kamiran.asia changed the title to HIPS registry Rules not work at Services
  • Solution
Posted (edited)

For registry subordinate keys under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\", you need to code the following, "HKEY_LOCAL_MACHINE\SYSTEM\*\".  For example:

HKEY_LOCAL_MACHINE\SYSTEM\*\Services\USBSTOR\Start

Edited by itman
Link to comment
Share on other sites

8 minutes ago, itman said:

For registry subordinate keys under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\", you need to code the following, "HKEY_LOCAL_MACHINE\SYSTEM\*\".  For example:

HKEY_LOCAL_MACHINE\SYSTEM\*\Services\USBSTOR\Start

Completely Correct and worked !!

Special thanks to @itman

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...