ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

DCS Events have Missing Fields for some Registry Value Activity events


Article ID: 208521


Updated On:


Integrated Cyber Defense Exchange ICDx


You are seeing some events with blank fields for reg_value_result while other times it is filled. 

  • Some entries have an empty result:

reg_value_result: { 

  • While other entries are not empty:

reg_value_result: { 
     data: 0


The Integrated Defense Exchange software is just passing along the data it receives from DCS itself. These items are also blank in the DCS database:

  • Empty result from the DCS database:

Old/New Values:  / 

  • Result that is not empty from the DCS database:

Old/New Values:  / 0


Release : 1.4

Component : DCS collector


The Integrated Cyber Defense Exchange (ICDx) software is working as designed and is passing along the data that it is receiving from DCS.