Veeam Thread Hunter Registry Key

[andre.simard]

Hi,

During the Hidden Feature Hunt session at VeeamON, several registry keys were shared. One of them, related to the Veeam Threat Hunter, was mentioned without any additional information: VTHScanEmail.

Could you please provide more details on the purpose and usage of this key? I couldn't find any KB articles or forum discussions about it.

Thank you.

[Mildur]

Hi Andre

Thanks for attending our session.
The key enables the scan of mail content in plaintext mails and email databases. Please be aware, that by enabling it, scan of your restore points may run much longer.

VTHScanEmail (default 1)
Scan plaintext emails and email databases (DBZ, MBX, PST, etc)

Best,
Fabian

#UPDATE --> changed default value of the key to "1".

[andre.simard]

Hi Mildur,

Thank you for the information.
Currently, we have a couple of cases where PST files are flagged as infected during the VTH scan, but they are not flagged as infected when scanned with Defender or another antivirus.
Could this key help us achieve a more accurate scan of the PST files, avoid false positives, or provide better information on what is infected within the PST files?

Thank you.

[Mildur]

Hi Andre

I want to update my last comment, it looks like the keys default was changed to "1" for the release of v12.3.
I'll have to check with our QA team about the changes and to update our internal documentation.

What you can try is set the key to "0", which should disable the scanning of PST files.

Best,
Fabian