Y
Y
Yuri Yerusalimsky2016-05-17 22:06:03
System administration
Yuri Yerusalimsky, 2016-05-17 22:06:03

How to monitor the creation of registry keys in the SOFTWARE section?

I know about the existence of programs like Regshot that allow you to create snapshots of the registry and then compare them. I need to follow the changes in two branches - HKEY_LOCAL_MACHINE\SOFTWARE and HKEY_CURRENT_USER\SOFTWARE. More precisely, you need to find out that new branches were created in this one, preferably in registry monitoring mode, and not by comparing snapshots (this is not convenient and slow). Prompt software products that can help in this matter.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
O
One Miay, 2016-05-17
@Miay

Try the program from Mark Russinovich - Procmon.exe. Through it, you can monitor the registry, file system, and almost everything! See here

S
Saiputdin Omarov, 2016-05-17
@generalx

I would compare line by line in notepad++. Compare plugin like.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question