<xsd:element name="registry_item" substitutionGroup="system_characteristics:item">
<xsd:annotation>
<xsd:documentation>The windows registry item specifies a particular registry key (or keys) to collect.</xsd:documentation>
<xsd:appinfo>
<item_name>Registry Item</item_name>
<extends>itemType</extends>
<valid_sections>message, object, data</valid_sections>
<example>
<registry_item id="1">
<object>
<hive>HKEY_LOCAL_MACHINE</hive>
<key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
<name>CurrentVersion</name>
</object>
<data>
<type datatype="string" status="exists">reg_sz</type>
<value datatype="string" status="exists">5.1</value>
</data>
</registry_item>
</example>
</xsd:appinfo>
</xsd:annotation>
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="system_characteristics:itemType">
<xsd:sequence>
<xsd:element name="object" minOccurs="1" maxOccurs="1">
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="system_characteristics:objectType">
<xsd:sequence>
<xsd:element name="hive" type="windows:objectHiveType" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The hive that the registry key belongs to.</xsd:documentation>
<xsd:appinfo>
<parent_item>registry_item</parent_item>
<cardinality>1</cardinality>
<content>string</content>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="key" type="system_characteristics:objectStringType" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This element describes a registry key to be gathered. Note that the hive portion of the string should not be inclueded, as this data can be found under the hive element.</xsd:documentation>
<xsd:appinfo>
<parent_item>registry_item</parent_item>
<cardinality>1</cardinality>
<content>string</content>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="name" type="system_characteristics:objectStringType" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>This element describes the name of a registry key.</xsd:documentation>
<xsd:appinfo>
<parent_item>registry_item</parent_item>
<cardinality>1</cardinality>
<content>string</content>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
<xsd:element name="data" minOccurs="0" maxOccurs="1">
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="system_characteristics:dataType">
<xsd:sequence>
<xsd:element name="type" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>Specifies the type of data stored by the registry key.</xsd:documentation>
<xsd:appinfo>
<parent_item>registry_item</parent_item>
<cardinality>1</cardinality>
<content>string</content>
<valid_datatypes>string</valid_datatypes>
</xsd:appinfo>
</xsd:annotation>
<xsd:complexType>
<xsd:simpleContent>
<xsd:restriction base="system_characteristics:dataStringType">
<xsd:enumeration value="reg_binary" />
<xsd:enumeration value="reg_dword" />
<xsd:enumeration value="reg_expand_sz" />
<xsd:enumeration value="reg_multi_sz" />
<xsd:enumeration value="reg_qword" />
<xsd:enumeration value="reg_sz" />
<xsd:enumeration value="" />
</xsd:restriction>
</xsd:simpleContent>
</xsd:complexType>
</xsd:element>
<xsd:element name="value" type="system_characteristics:dataStringType" minOccurs="1" maxOccurs="1">
<xsd:annotation>
<xsd:documentation>The actual value of the specified registry key.</xsd:documentation>
<xsd:appinfo>
<parent_item>registry_item</parent_item>
<cardinality>1</cardinality>
<content>string</content>
<valid_datatypes>binary, boolean, float, int, string</valid_datatypes>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
|