Tech
Forums
Jobs
Books
Events
Videos
Live
More
Interviews
Certification
Training
Career
Members
News
Blogs
Contribute
An Article
A Blog
A Video
An Ebook
An Interview Question
Register
Login
0
Answer
How to find the process which accessed a registry key?
Jon
14y
2k
1
Reply
Hi, im trying to find out the process name/id which caused a registry key change?
Im using an example from codeproject as my basic template to build up from. This allows me to detect registry key changes:
http://www.codeproject.com/KB/system/registrymonitor.aspx?msg=3475799#xx3475799xx
I've also borrowed a class which helps getting the process owner (as you cant access handles of System processes?) from:
http://www.sellsbrothers.com/askthewonk/secure/default.aspx?content=howcanigetthesecurityprin.htm
I thought i could just equate the intPtr of the registry hives to the process handle of current processes (if i manually changed registry values to test) but it doesn't appear to work?
Thanks in advance
Post
Reset
Cancel
Answers (
0
)
Next Recommended Forum
Access a drive directory and pass username and password
How Do I: Create a DataGridView in a Class for temporary use?