viewer9 documentation | Index Home |
Procmon Bug: RegQueryKey QueryKeyType Name
Procmon does not display the result for RegQueryKey operations where QueryKeyType is Name. The data is not missing in the PML data, only when Procmon displays it.
For example, here Name is a registry path:
But for the same event, Procmon does not display the data:
See also
- RegQueryKey PML Operation
- Procmon Bug: CreateFileMapping PageProtection
- Procmon Bug: Garbage after \Device\HarddiskVolume path
- Procmon Bug: Garbage in Registry Data
- Procmon Bug: QueryDirectory Missing Filename
- Procmon Bug: QueryStreamInformationFile Alternate Data Stream
- Procmon Bug: RegRestoreKey/RegSaveKey Path and HivePath
Posted 4 Jul 2022 last updated 22 Nov 2022 As viewer9 is just starting out, discussion is invited via email. Please send questions and comments to forum@viewer9.com directly. Threads that might be valuable to other users will be posted as part of the documentation. Posted messages will not include your address or your full name, and might be shortened for brevity.
Copyright 2022, bryantlite, Inc.