Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//NOFORN
7.5 Find String
The “find_string” verb states that a registry value contains the provided string.
Usage
reg_value(<hive_name>, <key_path>, <val_name>).find_string(<string>)
hive_name
Name of registry hive
key_path
Path of registry key within the hive
val_name
Name of registry value within the key
string
String to locate within the registry value
Truth Table
TRUE
hive_name\key_path\val_name value contains the string
FALSE
hive_name\key_path\val_name value does not contain the string
INVALID
Value does not exist or error occurred while collecting registry
information
128
SECRET//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh