Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Registry macros in custom rule path strings are expanded with backslash added

Registry macros in custom rule path strings are expanded with backslash added

Version

6.0
Issue

It seems that is not possible to compose a file name from elements stored in the registry.

Symptoms

 

Creating a custom registry rule using macros results in an extra backslash.

 

Cause

6.0.2 and lower agents assume that all macros target directories or full paths.  Therefore they automatically append a "\" for any pattern that has additional text after the macro.  7.x agents, will not add this slash for registry based macros, but will for all macro types.

 

Solution

Upgrade to a newer release of Parity.

 

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-09-2015
Views:
329