How can I use API to detect registry or file changes, file opening, or app execution?

[vbhunter]

Hi guys!


I am trying to write my own code to monitor and detect any registry or file changes. I would also like to detect when a file is being open or when an application is going to be executed.

I am using VB language.

Can anyone give me a hand here?


Regards,

Frank

[VictorN]

Files/Directories:

FindFirstChangeNotification/FindNextChangeNotification/FindCloseChangeNotification
or ReadDirectoryChangesW

Regisry:

RegNotifyChangeKeyValue

[Igor Vartanov]

I would also like to detect when a file is being open or when an application is going to be executed.

There's no API for spying like that, and the task requires for above-average programming skills, sorry, and you must be aware of kernel mode programming as well. The idea could be borrowed from Russinovich's FileMon.