Re: Dynamicism Of Windows Registry

[Philippe De Ryck <philippe.de.ryck () skynet be>]

On Wed, 2006-06-21 at 14:57 -0400, Jason T. Hallahan wrote:
> Hello and good day:
>
> I have a question. Exactly how dynamic is the Windows Registry?
> Specifically, if you were somehow able to monitor in real-time the
> changes made to the registry of a system on your network (HW/SW
> installation, Processes running, websites visited, etc.) would you be
> able to thwart an attack by that system (user), or would it be too
> little information, too late?
>
> Thanks for your help.
>
> Best regards,
> Jason

Well, if you want to know, check out "regmon" from sysinternals. It
allows you to monitor the registry in real time. Fasten your seatbelt
though :)

Philippe De ryck


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------