ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
DCS Events have Missing Fields for some Registry Value Activity events
Article ID: 208521
Integrated Cyber Defense Exchange
You are seeing some events with blank fields for reg_value_result while other times it is filled.
- Some entries have an empty result:
- While other entries are not empty:
The Integrated Defense Exchange software is just passing along the data it receives from DCS itself. These items are also blank in the DCS database:
- Empty result from the DCS database:
Old/New Values: /
- Result that is not empty from the DCS database:
Old/New Values: / 0
Release : 1.4
Component : DCS collector
The Integrated Cyber Defense Exchange (ICDx) software is working as designed and is passing along the data that it is receiving from DCS.