Skip to content

Enum: RegValueTypeIdEnum

The value type ID.

URI: ocsf:RegValueTypeIdEnum

Permissible Values

Value Meaning Description
REG_BINARY None Arbitrary binary data
REG_DWORD None A 32-bit integer
REG_DWORD_BIG_ENDIAN None A 32-bit integer in big-endian byte order
REG_EXPAND_SZ None A string containing unexpanded environment variables, e
REG_LINK None A string containing the target path of a symbolic link created by calling
REG_MULTI_SZ None A sequence of zero or more strings
REG_NONE None A value with no declared type
REG_QWORD None A 64-bit integer
REG_QWORD_LITTLE_ENDIAN None Not defined in Windows documentation and previously added to OCSF in error
REG_SZ None A string
UNKNOWN None The type is unknown
OTHER None The type is not mapped

Slots

Name Description
type_id The value type ID

Identifier and Mapping Information

Schema Source

LinkML Source

name: RegValueTypeIdEnum
description: The value type ID.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  REG_BINARY:
    text: REG_BINARY
    description: Arbitrary binary data.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: REG_BINARY
  REG_DWORD:
    text: REG_DWORD
    description: A 32-bit integer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: REG_DWORD
  REG_DWORD_BIG_ENDIAN:
    text: REG_DWORD_BIG_ENDIAN
    description: A 32-bit integer in big-endian byte order.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: REG_DWORD_BIG_ENDIAN
  REG_EXPAND_SZ:
    text: REG_EXPAND_SZ
    description: 'A string containing unexpanded environment variables, e.g.

      <code>%USERPROFILE%\Downloads</code>.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: REG_EXPAND_SZ
  REG_LINK:
    text: REG_LINK
    description: 'A string containing the target path of a symbolic link created by
      calling

      <code>RegCreateKeyEx</code> with <code>REG_OPTION_CREATE_LINK</code>.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: REG_LINK
  REG_MULTI_SZ:
    text: REG_MULTI_SZ
    description: A sequence of zero or more strings.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: REG_MULTI_SZ
  REG_NONE:
    text: REG_NONE
    description: A value with no declared type.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: REG_NONE
  REG_QWORD:
    text: REG_QWORD
    description: A 64-bit integer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: REG_QWORD
  REG_QWORD_LITTLE_ENDIAN:
    text: REG_QWORD_LITTLE_ENDIAN
    description: Not defined in Windows documentation and previously added to OCSF
      in error.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: REG_QWORD_LITTLE_ENDIAN
  REG_SZ:
    text: REG_SZ
    description: A string.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '10'
      caption:
        tag: caption
        value: REG_SZ
  UNKNOWN:
    text: UNKNOWN
    description: The type is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The type is not mapped. See the <code>type</code> attribute, which
      contains a

      data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other