Changes

Microsoft Windows Registry Security

1,567 bytes added, 22:32, 19 February 2015
The following lines were added (+) and removed (-):
''Other aspect of Windows security is discussed on the [[Windows Security Page]].''== Startup Programs ==== Specific Registry Keys ===== Startup Programs ====== Checking the Default Web Browser ==={{:Windows Registry- Default Web Browser}}== Tracking Changes ==There are two fundamental approaches to detecting changes to the Windows registry.  One is to take a snapshot of the registry, and then later take another and do a comparison.  This approach is thorough but very slow.  A second approach involves active, real-time monitoring.  This approach may be slightly less reliable, however, is more useful for detecting changes as they happen.  A disadvantage of real-time monitoring is that the TSR will utilize some resources as it runs and may make a slower PC seem to run even slower still.* snapshot and compare - no real-time performance loss, thorough, however a slow process to create the snapshot and compare.* real-time monitoring - quickly detect or even intercept changes to the registry.  may negatively impact system speed.Detecting changes to the registry, and stopping unwanted changes is a common part of a Host Intrusion Prevention System.  Most contemporary security tools to accomplish this are part of a larger commercial antivirus security suite or so-called host firewall.  Individual utilities to accomplish this are also available, such as [http://www.jacobsm.com/mjsoft.htm MJ Registry Watcher] and [http://sourceforge.net/projects/regshot/ Regshot].    [[Category:Computer_Technology]][[Category:Microsoft]][[Category:Windows]][[Category:Security]]
Bureaucrat, administrator
16,192
edits