<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.8</oval:schema_version>
    <oval:timestamp>2015-09-03T08:00:14.735-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:1899" version="5" class="inventory">
      <metadata>
        <title>Symantec Enterprise Security Manager 6 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:symantec:enterprise_security_manager:6"/>
        <description>Symantec Enterprise Security Manager 6 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-12T03:29:54.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-06-12T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-29T09:42:00.622-04:00">INTERIM</status_change>
            <status_change date="2007-07-16T09:55:12.208-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.332-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:25.539-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:03.731-05:00">ACCEPTED</status_change>
            <modified comment="Altered criterion comment to align with test purpose" date="2009-05-25T10:32:00.713-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-05-25T10:32:00.713-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:34.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1899 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:27.185-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:14.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Symantec Virus Protect 6 is installed and active." test_ref="oval:org.mitre.oval:tst:3683"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1663" version="4" class="inventory">
      <metadata>
        <title>Symantec Small Office or Home Office Edition Virus scan is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:symantec:norton_antivirus"/>
        <description>Symantec Small Office or Home Office Virus Scan is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-12T03:29:54.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-06-12T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-29T09:41:59.170-04:00">INTERIM</status_change>
            <status_change date="2007-07-16T09:55:09.644-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.682-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:42.904-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:00.910-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1663 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:21.343-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:12.455-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed virus scan software is Symantec Small Office or Home Office" test_ref="oval:org.mitre.oval:tst:3432"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <registry_test id="oval:org.mitre.oval:tst:3683" version="2" comment="Symantec Virus Protect 6 is installed and active." check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2384"/>
      <state state_ref="oval:org.mitre.oval:ste:3566"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3432" version="2" check_existence="at_least_one_exists" check="all" comment="the installed virus scan software is Symantec Small Office or Home Office" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2657"/>
      <state state_ref="oval:org.mitre.oval:ste:3300"/>
    </registry_test>
  </tests>
  <objects>
    <registry_object id="oval:org.mitre.oval:obj:2384" version="1" comment="The registry key that holds the location of the 'VirusProtect6' directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion</key>
      <name>Home Directory</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Symantec\InstalledApps</key>
      <name>Internet Security</name>
    </registry_object>
  </objects>
  <states>
    <registry_state id="oval:org.mitre.oval:ste:3566" version="2" comment="The registry key has a value not equal to 0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3300" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">0</value>
    </registry_state>
  </states>
</oval_definitions>