Difference between revisions of "ProtocolFilter"
(→Usage: added var types) |
m (→Usage: fixed var names) |
||
Line 12: | Line 12: | ||
==Usage== | ==Usage== | ||
− | ProtocolFilter:<name(string)>,<class | + | ProtocolFilter:<name(string)>,<class(guid)>[,advanced file parameters] |
===Examples=== | ===Examples=== |
Latest revision as of 16:30, 22 February 2008
ProtocolFilter | |
Group | Registry |
Main Application | Version 1.5 or later |
Required Update | n/a |
File Parameters | yes (third) |
Registry Parameters | no |
Build Parameters | yes (third) |
Special Parameters | no |
Detects protocol filters.
Usage
ProtocolFilter:<name(string)>,<class(guid)>[,advanced file parameters]
Examples
ProtocolFilter:"SBI Test Entry 1","{CAFFEE60-1234-1234-1234-581735711111}","filesize>=1"
Description
- Specify name of filter first. Use an Algo-Prefix if you want. AP
- Continue by the associated class ID, which also needs to be matched. Use an Algo-Prefix if you want. AP
- To further limit the detection, you can specify advanced file parameters for the file associated with the protocol filter.
Scan Results
- The protocol filter registry key.
- The associated CLSID, if found.
- The file (usually a library) used by the protocol filter, but only if advanced file parameters were specified.