Detect when the registry is created

Asked 2 years ago, Updated 2 years ago, 121 views

I want to hook up when the registry is created.

There are APIs such as regopenkey, but I thought I was not sure when all registry creation was included.

If hooking at the time of registry creation, which API is the best to hook?

And the only way to find the best API is by labor?!

c++ registry

2022-09-22 21:33

1 Answers

Creating and resolving file system filter drivers is the most appropriate method.

One such program is Process Monitor.


2022-09-22 21:33

If you have any answers or tips


© 2024 OneMinuteCode. All rights reserved.