What are Scan Parameters?

The check's scan parameters are used by the scanning engine to gather data for the control. Depending on the control type, one or more scan parameters will be required. The check's scan parameters combined make up a unique data point. Each data point must have a description, which will appear in compliance policies and reports.

A filled circle (Solid bullet means parameter is required) indicates the parameter is required.

Windows Group Membership Checks

Control Type

Group Name

Max Return Value

Data Type

Group Membership Check

Solid bullet means parameter is required

Solid bullet means parameter is required

String List

Windows WMI Query Checks

Control Type

Namespace

Query

Data Type

WMI Query Check

Solid bullet means parameter is required

Solid bullet means parameter is required

String List

Windows Share Access Checks

Note: A Share User or Path User is required for the check.

Control Type

Share User

Path User

Data Type

Share Access Check

Solid bullet means parameter is required

Solid bullet means parameter is required

String List

Windows File/Directory Checks

Control Type

File/Directory Path

Hash Type

Data Type

File/Directory Existence

Solid bullet means parameter is required

 

Boolean

File/Directory Permission

Solid bullet means parameter is required

 

String List

File Integrity Check

Solid bullet means parameter is required

Solid bullet means parameter is required

String

Windows Registry Checks

Control Type

Registry Hive

Registry Key

Name

Data Type

Registry Key Existence

Solid bullet means parameter is required

Solid bullet means parameter is required

 

Boolean

Registry Value Existence

Solid bullet means parameter is required

Solid bullet means parameter is required

Solid bullet means parameter is required

Boolean

Registry Value Content Check

Solid bullet means parameter is required

Solid bullet means parameter is required

Solid bullet means parameter is required

Boolean, Integer, String, or String List

Registry Permission

Solid bullet means parameter is required

Solid bullet means parameter is required

 

String List

Unix Checks

Control Type

File/Directory Path

Hash Type

Regular Expression

Data Type

File/Directory Existence

Solid bullet means parameter is required

 

 

Boolean

File/Directory Permission

Solid bullet means parameter is required

 

 

String

File Integrity Check

Solid bullet means parameter is required

Solid bullet means parameter is required

 

String

File Content Check

Solid bullet means parameter is required

 

Solid bullet means parameter is required

Line List

Directory Search Controls (Windows and Unix)

Scan parameters identify the search parameters that you want to use. There are several options available, including file/directory name, permissions and so on. The Data Type is String List.

Still have questions?

Check out the User-Defined Controls FAQs