Changes

Microsoft Windows Registry Security

806 bytes added, 21:25, 23 December 2014
The following lines were added (+) and removed (-):
== Tracking Changes ==There are two fundamental approaches to detecting changes to the Windows registry.  One is to take a snapshot of the registry, and then later take another and do a comparison.  This approach is thorough but very slow.  A second approach involves active, real-time monitoring.  This approach may be slightly less reliable, however, is more useful for detecting changes as they happen.  A disadvantage of real-time monitoring is that the TSR will utilize some resources as it runs and may make a slower PC seem to run even slower still.* snapshot and compare - no real-time performance loss, thorough, however a slow process to create the snapshot and compare.* real-time monitoring - quickly detect or even intercept changes to the registry.  may negatively impact system speed.
Bureaucrat, administrator
16,192
edits