How do I see what files/registry keys are being accessed by my application in Windows?
You can use Process Explorer's handle viewer ( View->Lower Pane View->Handles ) to see all of the files a process has open on a Windows machine. Show activity on this post. As another answer suggests process explorer will show you currently open file handles for a process.
Regshot is very useful tool for monitoring changes in your registry. Besides showing the current state of your Windows registry, it allows you to take a screenshot of it and save it for later comparison. Regshot is an open-source tool.
Launch Event Viewer, and browse to Event Viewer > Windows Logs > Security. You should see “Audit Success” events recording the date and time of your tweaks, and clicking these displays the name of the Registry key accessed, and the process responsible for the edit.
The registry or Windows registry is a database of information, settings, options, and other values for software and hardware installed on all versions of Microsoft Windows operating systems. When a program is installed, a new subkey is created in the registry.
Check out Process Monitor at
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
Microsoft Process Monitor is better at this job. I've tried other tools but they are not as good. And MS is most trustworthy in this case, since it is made by the OS developer anyway
I haven't tried it myself but someone should try Regmon and maybe post how it goes.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With