-
July 24th, 2010, 04:11 AM
#1
How can I use API to detect registry or file changes, file opening, or app execution?
Hi guys!
I am trying to write my own code to monitor and detect any registry or file changes. I would also like to detect when a file is being open or when an application is going to be executed.
I am using VB language.
Can anyone give me a hand here?
Regards,
Frank
-
July 24th, 2010, 04:54 AM
#2
Re: How can I use API to detect registry or file changes, file opening, or app execut
Files/Directories:FindFirstChangeNotification/FindNextChangeNotification/FindCloseChangeNotification
or ReadDirectoryChangesW Regisry:
RegNotifyChangeKeyValue
Victor Nijegorodov
-
July 24th, 2010, 01:13 PM
#3
Re: How can I use API to detect registry or file changes, file opening, or app execut
I would also like to detect when a file is being open or when an application is going to be executed.
There's no API for spying like that, and the task requires for above-average programming skills, sorry, and you must be aware of kernel mode programming as well. The idea could be borrowed from Russinovich's FileMon.
Best regards,
Igor
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|