> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/registry-value-type.md).

# XDM\_CONST.REGISTRY\_VALUE\_TYPE

Registry value type. See <https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-value-types>.

| Original                   | Mapped                                                       | Description                                                                                                                                                                                                                                                                                                                                                                |
| -------------------------- | ------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| REG\_BINARY                | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_BINARY                | Binary data in any form.                                                                                                                                                                                                                                                                                                                                                   |
| REG\_DWORD                 | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_DWORD                 | A 32-bit number.                                                                                                                                                                                                                                                                                                                                                           |
| REG\_DWORD\_LITTLE\_ENDIAN | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_DWORD\_LITTLE\_ENDIAN | A 32-bit number in little-endian format. Windows is designed to run on little-endian computer architectures. Therefore, this value is defined as REG\_DWORD in the Windows header files.                                                                                                                                                                                   |
| REG\_DWORD\_BIG\_ENDIAN    | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_DWORD\_BIG\_ENDIAN    | A 32-bit number in big-endian format. Some UNIX systems support big-endian architectures.                                                                                                                                                                                                                                                                                  |
| REG\_EXPAND\_SZ            | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_EXPAND\_SZ            | A null-terminated string that contains unexpanded references to environment variables (for example, "%PATH%"). It will be a Unicode or ANSI string depending on whether you use the Unicode or ANSI functions. To expand the environment variable references, use the ExpandEnvironmentStrings function.                                                                   |
| REG\_LINK                  | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_LINK                  | A null-terminated Unicode string that contains the target path of a symbolic link that was created by calling the RegCreateKeyEx function with REG\_OPTION\_CREATE\_LINK.                                                                                                                                                                                                  |
| REG\_MULTI\_SZ             | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_MULTI\_SZ             | A sequence of null-terminated strings, terminated by an empty string (\0). The following is an example: String1\0String2\0String3\0LastString\0\0 The first \0 terminates the first string, the second to the last \0 terminates the last string, and the final \0 terminates the sequence. Note that the final terminator must be factored into the length of the string. |
| REG\_NONE                  | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_NONE                  | No defined value type.                                                                                                                                                                                                                                                                                                                                                     |
| REG\_QWORD                 | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_QWORD                 | A 64-bit number.                                                                                                                                                                                                                                                                                                                                                           |
| REG\_QWORD\_LITTLE\_ENDIAN | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_QWORD\_LITTLE\_ENDIAN | A 64-bit number in little-endian format. Windows is designed to run on little-endian computer architectures. Therefore, this value is defined as REG\_QWORD in the Windows header files.                                                                                                                                                                                   |
| REG\_SZ                    | XDM\_CONST.REGISTRY\_VALUE\_TYPE\_REG\_SZ                    | A null-terminated string. This will be either a Unicode or an ANSI string, depending on whether you use the Unicode or ANSI functions.                                                                                                                                                                                                                                     |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/xsiam-data-model-schema/consts/registry-value-type.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.