Registry Rules

The rules for Registry objects are displayed on the "Rules"->"Registry" tab. The Windows Registry stores most of the configuration settings of Windows OS and applications. SSM preset registry rules are configured to track and protect the most critical registry keys and values, which can be modified by malicious programs.

Overview

SSM provides real-time tracking of changes for the registry objects specified in the rules. "Real-time" here means that a change attempt is intercepted before the change can take place so that the user can safely prevent undesired changes in Registry Modification Application Activity dialog. Registry rules are divided into several groups of the objects according to their functional scope.

Registry object options

"Access" options:

• Create - allow creation of the registry object;
• Delete - allow deletion the registry object;
• Write - allow modification of the registry object.

"Logging" options:

• Create - log creation of the registry object;
• Delete - log deletion of the registry object;
• Write - log modifications of the registry object.

Registry Objects dialog

Registry Objects dialog is a repository for registry entries (keys and values) used in registry rules. The registry entries are organized in groups. The group includes registry keys (with or without subkeys) and registry key's values. Also, Registry Objects can be shared between different groups.

Registry rules use either group or group's individual keys/values.

Dialog description

"Registry Objects" dialog has two panels: "Groups" left panel with the list of groups, and "Registry Objects" right panel with the list of Registry Objects from the group selected in the left panel.

Preset Registry rules

The rule is intended to help reset the default (global) rules to the preset settings. This procedure is specially recommended when the preset rules have been updated. System Safety Team is working on the preset rule set and will be adding new rules to improve your registry protection. At the same time it would not be wise to discard user changes. The wizard's goal is to provide the way to reset/update the default rules to the preset rules so that the user changes may be viewed and retained if necessary.