Registry tab

On the Windows platform, you can define rules to monitor registry keys. You can choose to include or exclude a registry key for monitoring. When a monitored registry key is changed, an event is generated on the endpoint and sent to the ePO - On-prem server.

Add registry keys to be included or excluded from being monitored for changes.

Option definitions

Option	Definition
Add	Opens the Add Registry dialog box. Registry — Specifies the registry key to be monitored for changes. Include — Monitors changes to the specified registry key. Exclude — Excludes the registry key from being monitored. OK — Monitors changes to the specified registry key. Cancel — Exits without saving the settings.
Edit	Opens the Add Registry dialog box with information for a selected rule. Edit the registry key as required, then click OK.
Remove	Deletes the selected rule from the policy.