(
(
substring
(
6,2
)
of
(
following text of last "\" of it
)
&
(
substring
(
4,2
)
of
(
following text of last "\" of it
)
as string as integer as month as three letters
)
& first 4 of
(
following text of last "\" of it
)
)
as date as string
)
of
(
value "DEFWATCH_10" of
(
if exists
(
key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs" of registry
)
then
(
key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs" of registry
)
else
(
key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs" of registry
)
)
as string
)
((substring (6,2) of (following text of last "\" of it) & (substring (4,2) of (following text of last "\" of it) as string as integer as month as three letters) & first 4 of (following text of last "\" of it)) as date as string) of (value "DEFWATCH_10" of (if exists (key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs" of registry) then (key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion\SharedDefs" of registry) else (key "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs" of registry)) as string)
