|
-
April 19th, 2009, 05:07 AM
#1
registry operations
how can i get registry operations associatd to a given executable files?
in other words,
how can i get subkeys names that are created by a given process?
-
April 20th, 2009, 11:49 AM
#2
Re: registry operations
Can you perhaps explain why you need to do this ¿
-
April 21st, 2009, 01:51 AM
#3
Re: registry operations
I'm a student in Jordan University in IT college
and I made a graduation project related to monitor processes that are running on the system
-
April 21st, 2009, 03:44 AM
#4
Re: registry operations
 Originally Posted by elham
I'm a student in Jordan University in IT college
and I made a graduation project related to monitor processes that are running on the system
This still does not tell us what exactly you are trying to do. Can you elaborate what exactly you are looking for?
-
April 22nd, 2009, 12:35 AM
#5
Re: registry operations
like operations column in the procmon tools which give what each process do in the registry
e.g. of process operations :
regopenkey, regclosekey, createfile, readfile, ...
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|
Reply With Quote
