Typical usage scenario:
would get all pagefile files, instead of just the first, as it outputs now. Plus, making this work would avoid launching the more resource intensive WMIC+RunCommand plugin+associated string manipulation combo to get the same result.
Code: Select all
[MS_Registry_PagingFiles] Measure=Registry RegHKey=HKEY_LOCAL_MACHINE RegKey=SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management RegValue=PagingFiles RegExpSubstitute=1 Substitute=(some particular substitute option, to handle the "?"-s and the "\n"-s) UpdateDivider=(some particular update divider)
Or ... is there any way of getting this and I don't know about it?